ruby - OpenSSL::SSL::SSLContext SNI servername_cb Not Working -


as referenced in openssl::x509::certificate showing certificate wrong domain, need use tlsv1 or above and server name indication extension.

even ssl_version , servername_cb set via sslcontext, i'm still getting wrong certificate myproair.com.

  begin      timeout(1)       tcp_client = tcpsocket.new("#{instance["domain"]}", 443)       ssl_context = openssl::ssl::sslcontext.new()       ssl_context.ssl_version = :tlsv1       ssl_context.servername_cb = "https://#{instance["domain"]}"       ssl_client = openssl::ssl::sslsocket.new(tcp_client, ssl_context)       ssl_client.connect       cert = openssl::x509::certificate.new(ssl_client.peer_cert)       ssl_client.sysclose       tcp_client.close       #http://ruby-doc.org/stdlib-2.0/libdoc/openssl/rdoc/openssl/x509/certificate.html       date = date.parse((cert.not_after).to_s)       row.push("#{date.strftime('%f')} #{cert.signature_algorithm} #{cert.subject.to_a.select{|name, _, _| name == 'cn' }.first[1]}".downcase.ljust(57))     end   rescue socketerror     row.push("down".ljust(57))   rescue errno::econnrefused     row.push("connection refused".ljust(57))   rescue errno::econnreset     row.push("connection reset".ljust(57))   rescue timeout::error     row.push("no 443 listener".ljust(57))   rescue openssl::ssl::sslerror     row.push("bad certificate - ssl error".ljust(57))   rescue exception => ex     row.push("error: #{ex.class} #{ex.message}".ljust(57))   end

how set server name in ruby 2.0 on os x?

$ ruby --version ruby 2.0.0p481 (2014-05-08 revision 45883) [universal.x86_64-darwin14]  $ openssl version openssl 0.9.8zc 15 oct 2014

naturally use undocumented 'hostname' method openssl::sslsocket!

tcp_client = tcpsocket.new("#{instance["domain"]}", 443) ssl_context = openssl::ssl::sslcontext.new() ssl_context.ssl_version = :tlsv1 ssl_client = openssl::ssl::sslsocket.new(tcp_client, ssl_context) ssl_client.hostname = instance["domain"] ssl_client.connect cert = openssl::x509::certificate.new(ssl_client.peer_cert) ssl_client.sysclose tcp_client.close

i discovered here while writing code similar goal.


Comments

Post a Comment

Popular posts from this blog

c++ - Difference between pre and post decrement in recursive function argument -

i have following sample code used pre-decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(--c); cout << c << endl; return; } } this function give output input 4 : dp3 dp2 dp1 dp0 0 1 2 3 but when use post decrement void function(int c) { if(c == 0) { return; } else { cout << "dp" << c << endl; function(c--); cout << c << endl; return; } } output goes in infinite loop dp4 can explain me in detail why happens ? this happens because function(c--) called same value of c , when finishes c decremented. recursively called, hence called same value no chance of return , hit stack overflow error. assume this, int x = 1, y = 0; y = x++ result y == 1 , x == 2. if y = ++x , bot x , y 2.
Read more

php - Nothing but 'run(); ' when browsing to my local project, how do I fix this? -

i added new project. made mistake in projectname.conf file in sites-available apache2, led me reinstalling apache2. after reinstalling , re-enabling projects on every page of every project .. <body> run(); </body> .. i've run composer update, restarted service, restarted pc, checked config files, tried disabling new project. there nothing in error log, , access.log: 127.0.0.1 - - [15/may/2015:01:40:47 +0200] "get / http/1.1" 304 181 "-" "mozilla/5.0 (x11; ubuntu; linux x86_64; rv:38.0) gecko/20100101 firefox/38.0" maybe i'm forgetting apache2 reinstall? don't think did different last time installed it. looks haven't setup php correctly. take @ this great guide , maybe you're forgetting link php config apache2.
Read more

php - How can I echo out this array? -

i don't know how go grabbing data in variable , put foreach loop. class tree{ private $info = array( array('name'=>'jim','state'=>'nu','company'=>'nu','phone'=>array('cell'=>'5615111111','office'=>'5611111111'),'email'=>array('primary'=>'exs@example.com','ex@there.com')), array('name'=>'joe smith','city'=>'phoenix','phone'=>'4805551111','email'=>'jsmith@some_email.com'), array('name'=>'john doe','city'=>'chandler','company'=>'doe co.','email'=>array('jdoe@gmail.com','personal'=>'email@email.com'),'phone'=>'6025550002') ); } if you're inside of class, can access private variable using $this->variablename . example, i...
Read more