Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 584360 - dev-libs/openssl: Compatibility with [bracketed] IPv6 addresses as a -connect parameter
Summary: dev-libs/openssl: Compatibility with [bracketed] IPv6 addresses as a -connect...
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Library (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Gentoo's Team for Core System packages
URL:
Whiteboard:
Keywords: PATCH
Depends on:
Blocks:
 
Reported: 2016-05-27 19:12 UTC by Matthias Waechter
Modified: 2022-12-14 13:55 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments
patch for supporting [bracketed] IPv6 address as -connect parameter to openssl (openssl-1.0.2-ipv6-bracketcompat.patch,431 bytes, patch)
2016-05-27 19:12 UTC, Matthias Waechter
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Waechter 2016-05-27 19:12:06 UTC
Created attachment 435576 [details, diff]
patch for supporting [bracketed] IPv6 address as -connect parameter to openssl

Hello there,

Seems that Gentoo developers did a great job in teaching OpenSSL builds to support literal IPv6 addresses, specified as the -connect parameter. The following works flawlessly right now:

$ openssl s_client -connect ::1:443

However, other distributions like Fedora (only) support the bracketed form of the IPv6 address, like in URLs, and so some scripts like testssl.sh expect the bracketed IPv6 address to work. However, Gentoo builds don’t support it. The following gives an error:

$ openssl s_client -connect [::1]:443

The attached patch should be an easy fix for that. It is expected to be applied after the openssl-1.0.2-ipv6.patch.

Please consider adding this patch.

Thank you,
– Matthias
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-12-14 13:55:14 UTC
This would be something to send upstream. I can't speak for why in 2016 our OpenSSL behaved differently to Fedora's.