]> source.dussan.org Git - tigervnc.git/commit
Properly store certificate exceptions in Java viewer
authorBrian P. Hinz <bphinz@users.sf.net>
Tue, 8 Sep 2020 08:13:32 +0000 (10:13 +0200)
committerPierre Ossman <ossman@cendio.se>
Tue, 8 Sep 2020 12:14:49 +0000 (14:14 +0200)
commit20dea801e747318525a5859fe4f37c52b05310cb
tree3151c256dbaab80b1e341094db4cc7ad19d60e0b
parent7399eab79a4365434d26494fa1628ce1eb91562b
Properly store certificate exceptions in Java viewer

Like the native viewer, the Java viewer didn't store certificate
exceptions properly. Whilst not as bad as the native viewer, it still
failed to check that a stored certificate wouldn't be maliciously used
for another server. In practice this can in most cases be used to
impersonate another server.

Handle this like the native viewer by storing exceptions for a specific
hostname/certificate combination.

(cherry picked from commit f029745f63ac7d22fb91639b2cb5b3ab56134d6e)
java/com/tigervnc/rfb/CSecurityTLS.java