From 3ecc791ddcc537e5eaa663254af6207e65da1a51 Mon Sep 17 00:00:00 2001
From: gotoyuzo <gotoyuzo@b2dd03c8-39d4-4d8f-98ff-823fe69b080e>
Date: Mon, 8 Oct 2007 11:14:41 +0000
Subject: * lib/net/imap.rb, lib/net/smtp.rb, lib/net/pop.rb: hostname should  
 be verified against server's indentity as persented in the server's  
 certificate. [ruby-dev:31960]

* ext/openssl/lib/net/telnets.rb, ext/openssl/lib/net/ftptls.rb: ditto.


git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@13656 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
---
 lib/net/pop.rb | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'lib/net/pop.rb')

diff --git a/lib/net/pop.rb b/lib/net/pop.rb
index d0145cb5f0..9f00465a1d 100644
--- a/lib/net/pop.rb
+++ b/lib/net/pop.rb
@@ -533,6 +533,9 @@ module Net
         s = OpenSSL::SSL::SSLSocket.new(s, context)
         s.sync_close = true
         s.connect
+        if context.verify_mode != OpenSSL::SSL::VEIFY_NONE
+          s.post_connection_check(@address)
+        end
       end
       @socket = InternetMessageIO.new(s)
       logging "POP session started: #{@address}:#{@port} (#{@apop ? 'APOP' : 'POP'})"
-- 
cgit v1.2.3