Ubuntu
jabberd2 package

  1. Bug #1380230
  2. Comment #2

Comment 2 for bug 1380230

Revision history for this message
Jerry Zhang (jerryzh168) wrote :

In this case, our algorithm is not accurate. Actually it didn't find SSL_new for other reasons. So the above result can't support our conclusion.

But later we verified the code manually and found that jabberd2 didn't call SSL_CTX_set_verify(), so it must be that jabberd2 didn't verify the certificate.

Sorry for the confusion.