Skip to Content.
Sympa Menu

freetds - Re: [freetds] freetds have some ssl security problems

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: Frediano Ziglio <freddy77 AT gmail.com>
  • To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] freetds have some ssl security problems
  • Date: Thu, 23 Oct 2014 17:12:07 +0100

2014-10-23 16:06 GMT+01:00 Frediano Ziglio <freddy77 AT gmail.com>:
> 2014-10-23 15:14 GMT+01:00 润青杨 <rainkin1993 AT gmail.com>:
>> Hi guys,
>> Recently, our group are trying to find ssl security problems by static
>> anlysis. Now we have find some problems in freetds-bin and report this bugs
>> to the launchpad, but we haven't receive any responses.
>> Could you please take a look at this bug:
>> https://bugs.launchpad.net/ubuntu/+source/freetds/+bug/1376592
>> Thanks,
>> Rainkin
>
>
> Thank you,
> I think you are right.
>
> However there is mainly a problem in the default configuration. By
> default when you install a server it use quite silently a self-signed.
> This means mainly that a man in the middle is just behind the door.
>
> Frediano

Yes, there should be some option. Specifically we should test
everything having some options to disable some checks. Also location
for root certificate should be required.

Frediano




Archive powered by MHonArc 2.6.24.

Top of Page