Authentication Bypass

OpenSSL is vulnerable to Authentication Bypass. The vulnerability is due to SSLVERIFYPEER not enforcing handshake failure when the server's RPK does not match an expected key, allowing unauthenticated connections to proceed...