Red Hat Bugzilla – Full Text Bug Listing
|Summary:||Package openssl lacks IPv6 support|
|Product:||[Fedora] Fedora||Reporter:||Jan Pazdziora <jpazdziora>|
|Component:||openssl||Assignee:||Tomas Mraz <tmraz>|
|Status:||CLOSED RAWHIDE||QA Contact:||Brian Brock <bbrock>|
|Fixed In Version:||Doc Type:||Bug Fix|
|Doc Text:||Story Points:||---|
|Last Closed:||2006-08-07 11:52:46 EDT||Type:||---|
|oVirt Team:||---||RHEL 7.3 requirements from Atomic Host:|
|Bug Depends On:|
Description Jan Pazdziora 2006-07-13 03:08:43 EDT
Description of problem: This package seems to lack IPv6 support. How reproducible: openssl s_client -connect 'ipv6hostname:443' Actual results: gethostbyname failure Expected results: Should work just like IPv4.
Comment 1 Jan Pazdziora 2006-07-13 03:29:31 EDT
Created attachment 132350 [details] Patch to replace IPv4 routines with AF-agnostic (or IPv6) in BIO_* This patch changes: crypto/bio/bio.h: comment out no longer needed functions, and adding *_ipv6 variants crypto/bio/b_sock.c: comment out no longer needed functions, plus changing char ip and sockaddr_in to more portable getaddrinfo style crypto/bio/bss_conn.c: changes to use getaddrinfo, changes in param_hostname parsing, also allowing IPv6 addresses in brackets doc/crypto/BIO_s_connect.pod: documentation of the changes util/libeay.num: marking functions as NOEXIST The package passes existing tests but I am not sure to what extend the BIO parts really gets tested. To be done: BIO_get_accept_socket would also use IPv6 in brackets, but I'd really need some tests for the affected parts of the openssl package.
Comment 2 Jan Pazdziora 2006-07-13 03:33:06 EDT
Created attachment 132352 [details] Patch to replace IPv4 routines with AF-agnostic (or IPv6) in apps The patch changes the use of char ip and sockaddr_in to getaddrinfo. It required some changes in the function parameters, for example port is not handled as char *, not int. With this patch, openssl s_client -connect 'ipv6host:443' or openssl s_client -connect '[::FFFF:IPv4address]:https' work now.
Comment 3 Jan Pazdziora 2006-07-17 05:02:01 EDT
Created attachment 132538 [details] Patch to replace IPv4 routines with AF-agnostic (or IPv6) in BIO_*
Comment 4 Tomas Mraz 2006-07-20 04:35:05 EDT
Comment 5 Jan Pazdziora 2006-07-20 06:27:34 EDT
Created attachment 132738 [details] Patch to replace IPv4 routines with AF-agnostic (or IPv6) in BIO_* Fixed indentation -- previous patches were done using -b which lets us with broken indentation. Fixed bug with OPENSSL_free(*host_ptr); and freeaddrinfo(res0). Changed the logic in conn_state, to process all getaddrinfo records, should connect fail. TomÃ¡Å¡, thanks for the review.
Comment 6 Jan Pazdziora 2006-07-20 06:59:13 EDT
Created attachment 132739 [details] Patch to replace IPv4 routines with AF-agnostic (or IPv6) in BIO_* Fixing up INET6_ADDRSTRLEN + 16. Removing *_ipv6 functions, to make changes to ABI as small as possible.
Comment 7 Tomas Mraz 2006-08-07 11:52:46 EDT
I've decided to use only the apps patch as the BIO_ routines doesn't seem to be used in openssl itself and we don't know of any important third party software which would use them. Fixing the BIO routines is left on upstream.