From b425be16b3678496858254e957eb35380d628227 Mon Sep 17 00:00:00 2001 From: Ingela Anderton Andin Date: Fri, 20 Oct 2017 15:03:30 +0200 Subject: ssl: Do not provide IP address to ssl:connect in erlang distribution over TLS As TLS clients will perform a hostname check against certificates the IP-address does not make much sense. --- lib/ssl/src/inet_tls_dist.erl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'lib/ssl/src/inet_tls_dist.erl') diff --git a/lib/ssl/src/inet_tls_dist.erl b/lib/ssl/src/inet_tls_dist.erl index 0da4b3587f..78094c474b 100644 --- a/lib/ssl/src/inet_tls_dist.erl +++ b/lib/ssl/src/inet_tls_dist.erl @@ -93,7 +93,7 @@ do_setup(Driver, Kernel, Node, Type, MyNode, LongOrShortNames, SetupTime) -> ?trace("port_please(~p) -> version ~p~n", [Node,Version]), dist_util:reset_timer(Timer), - case ssl_tls_dist_proxy:connect(Driver, Ip, TcpPort) of + case ssl_tls_dist_proxy:connect(Driver, Address, TcpPort) of {ok, Socket} -> HSData = connect_hs_data(Kernel, Node, MyNode, Socket, Timer, Version, Ip, TcpPort, Address, -- cgit v1.2.3