HTTPCLIENT-996: An emergency fix for javax.net.ssl.SSLException: "hos…

…tname in certificate didn't match ..." error

git-svn-id: https://svn.apache.org/repos/asf/httpcomponents/httpclient/branches/4.0.x@997083 13f79535-47bb-0310-9956-ffa450edef68

RELEASE_NOTES.txt

@@ -1,3 +1,19 @@
+Release 4.0.3
+-------------------
+
+This is an emergency release fixing a critical regression in SSL connection
+management. 4.0.2 release included improved support for multihome hosts,
+which produced a side effect on the default SSL hostname verification
+algorithm. An attempt to establish an SSL connection fails with 
+javax.net.ssl.SSLException: "hostname in certificate didn't match ..." error.
+
+Changelog
+-------------------
+
+* [HTTPCLIENT-996] An emergency fix for javax.net.ssl.SSLException: 
+  "hostname in certificate didn't match ..." error.
+  Contributed by Oleg Kalnichevski <olegk at apache.org>
+
 Release 4.0.2
 -------------------
 

httpclient/src/main/java/org/apache/http/impl/conn/DefaultClientConnectionOperator.java

@@ -142,7 +142,7 @@ public void openConnection(OperatedClientConnection conn,
                 if (layeredsf != null) {
                     connsock = layeredsf.createSocket(
                             sock, 
-                            address.getHostAddress(),
+                            target.getHostName(),
                             schm.resolvePort(target.getPort()),
                             true);
                     if (sock != connsock) {