[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: openssl ipv6 support



Michael Cronenworth wrote:
Anyone know if OpenSSL supports IPv6? All I've found is that it does not, which is a real bummer. I found a bug[1] that looks like it added IPv6 support, but when I test using the openssl command line argument it fails.

If OpenSSL does support IPv6, then I'd be grateful to know where to look to work with the C ABI.

[1] https://bugzilla.redhat.com/show_bug.cgi?id=198737


Mk, if anyone is interested here's what I've discovered.

As disclosed in the Red Hat bug, back in 2006 a Red Hat developer tried to push a patch to allow BIOs to support IPv6. This patch was rejected in an unfriendly manner by an OpenSSL developer and was dropped.

In order to use IPv6 with OpenSSL, you have to manually setup bind(), listen(), and accept() calls and link the resulting file descriptor to a BIO with BIO_set_fd() instead of using BIO_do_accept() and then everything will work normally.

It would be nice if the IPv6 BIO patch was brought in to OpenSSL. Maybe I'll make a bug on it and ruffle some feathers...


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]