Artifacts Associated With Ticket 9d503a1cac442edf040bad487d795892ea19f2db
Ticket change [7c4f431d5e] (rid 1355) by anonymous on 2018-09-22 09:16:56:
- foundin initialized to: "1.7.16"
- icomment:
Currently the -require flag defaults to 0/off, which means that TclTLS does not require the other party to present any kind of certificate to authenticate itself. This means that a completely unauthenticated key exchange is performed and so you could be talking to anybody. All the security properties of TLS are void in this mode, so turning it off should be a quite rare thing to do.
- login: "anonymous"
- mimetype: "text/html"
- private_contact initialized to: "4d3bc24d727f6c89fb1509fef02f21887282efcc"
- severity initialized to: "Important"
- status initialized to: "Open"
- title initialized to: "Make -require 1 the default"
- type initialized to: "Feature Request"
Ticket change [2b40823fb7] (rid 1357) by anonymous on 2018-09-22 09:31:51:
- icomment:
Turning this on by default might mean some work either shipping a default ca file or knowing where one is on most platforms. For instance, on my Mac with OpenSSL installed there is a default ca file in /etc/ssl/cert.pem (and a copy in /usr/local/etc/openssl/cert.pem).
- login: "anonymous"
- mimetype: "text/html"
- priority changed to: "Immediate"
- resolution changed to: "Open"
- username: "Neil Madden"
- icomment: