diff --git a/docs/CHANGELOG.md b/docs/CHANGELOG.md index 7cb10ddb..bc36c7ff 100644 --- a/docs/CHANGELOG.md +++ b/docs/CHANGELOG.md @@ -2,6 +2,10 @@ All changes to this project will be documented in this file. +## [11.0.0] - 2020-11-11 + +(openssl security fix) in the client to server connection, peer verification is not done in all cases. See https://github.com/machinezone/IXWebSocket/pull/250 + ## [10.5.7] - 2020-11-07 (docker) build docker container with zlib disabled diff --git a/ixwebsocket/IXSocketOpenSSL.cpp b/ixwebsocket/IXSocketOpenSSL.cpp index 60988e34..5ae93e67 100644 --- a/ixwebsocket/IXSocketOpenSSL.cpp +++ b/ixwebsocket/IXSocketOpenSSL.cpp @@ -506,10 +506,9 @@ namespace ix } } - SSL_CTX_set_verify( - _ssl_context, SSL_VERIFY_PEER, [](int preverify, X509_STORE_CTX*) -> int { - return preverify; - }); + SSL_CTX_set_verify(_ssl_context, + SSL_VERIFY_PEER, + [](int preverify, X509_STORE_CTX*) -> int { return preverify; }); SSL_CTX_set_verify_depth(_ssl_context, 4); } else diff --git a/ixwebsocket/IXWebSocketVersion.h b/ixwebsocket/IXWebSocketVersion.h index f00f2b40..8d46b562 100644 --- a/ixwebsocket/IXWebSocketVersion.h +++ b/ixwebsocket/IXWebSocketVersion.h @@ -6,4 +6,4 @@ #pragma once -#define IX_WEBSOCKET_VERSION "10.5.7" +#define IX_WEBSOCKET_VERSION "10.6.0"