Bug 137257 – gFTP does not like wildcard SSL certificates

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Kai Blaschke 2006-06-19 07:03:13 UTC]

Please describe the problem:
Connecting to a FTP server over TLS/SSL which uses a wildcard SSL certificate
(*.domain.tld) and having the "Verify SSL Peer" option active will not work.
gFTP will abort the connection.

Steps to reproduce:
1. Find or set up a server using a wildcard SSL certificate
2. Make sure the "Verify SSL Peer" option is on
3. Connect to the host


Actual results:
gFTP aborts the connection with the following error message:

ERROR: The host in the SSL certificate (*.domain.tld) does not match the host
that we connected to (ftp.domain.tld). Aborting connection.

Expected results:
gFTP should honour wildcards in the certificate's domain name (CN / common name
entry) and continue checking the remaining certificate values (CA etc.).

Does this happen every time?
This problem is always reproducible.


I reported this bug upstream about two months ago, and there is still no reaction from the author. So I created a patch by myself, which fixes the issue. Patch and ebuild are attached.

[Comment 1 Kai Blaschke 2006-06-19 07:03:38 UTC]

Created attachment 89531 [details, diff]
Patch fixing the wildcard certificate issue

[Comment 2 Kai Blaschke 2006-06-19 07:04:16 UTC]

Created attachment 89532 [details]
Updated ebuild to include the patch

[Comment 3 Kai Blaschke 2006-09-20 00:39:45 UTC]

Is there any possibility to have this fix in portage anytime soon? Seems the assignee lost sight of the bug a few month ago. The patch has been accepted upstream and is currently available in CVS.

Thank you :)

[Comment 4 Gilles Dartiguelongue (RETIRED) 2007-01-14 20:05:02 UTC]

could you add the URL to upstream bug please ?

[Comment 5 Mart Raudsepp 2007-01-14 20:08:55 UTC]

Upstream bug for this was http://bugzilla.gnome.org/show_bug.cgi?id=339663
Fixed in 2.0.18-r5, thanks!