diff options
| author | Olav Morken <olav.morken@uninett.no> | 2012-05-15 11:33:13 +0000 |
|---|---|---|
| committer | Olav Morken <olav.morken@uninett.no> | 2012-05-15 11:33:13 +0000 |
| commit | 744fa4fae6b132fdbca301bd16c90680ec3dd102 (patch) | |
| tree | c2100a54d9a3ef30a5e61354a6b1ff4971e5432c /docs | |
| parent | ce9bc78e67b3ff5a613a3bb3221960193d954572 (diff) | |
| download | simplesamlphp-origin/simplesamlphp-1.8.zip simplesamlphp-origin/simplesamlphp-1.8.tar.gz simplesamlphp-origin/simplesamlphp-1.8.tar.bz2 | |
aselect: Enable verification of SSL certificate on A-Select endpoint.origin/simplesamlphp-1.8
Without the certificate check, we leave ourselves vulnerable to
man-in-the-middle between the simpleSAMLphp installation and the
A-Select server.
Thanks to Thijs Kinkhorst for reporting this vulnerability!
git-svn-id: https://simplesamlphp.googlecode.com/svn/branches/simplesamlphp-1.8@3098 44740490-163a-0410-bde0-09ae8108e29a
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/simplesamlphp-changelog.txt | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/docs/simplesamlphp-changelog.txt b/docs/simplesamlphp-changelog.txt index f081c13..12e13e5 100644 --- a/docs/simplesamlphp-changelog.txt +++ b/docs/simplesamlphp-changelog.txt @@ -6,6 +6,12 @@ simpleSAMLphp changelog This document lists the changes between versions of simpleSAMLphp. See the upgrade notes for specific information about upgrading. +## Version 1.8.3 + +Released 2012-05-15. + + * Fix missing SSL certificate check in `aselect` module. + ## Version 1.8.2 Released 2012-01-10. |