[openssl-dev] [openssl.org #4258] bug: s_client -connect option fails on IPv6 addresses

Markus Wernig via RT rt at openssl.org
Wed Jan 20 20:07:04 UTC 2016


Hi all

When an IPv6 address:port tuple is given to s_client's -connect option,
the internal parsing of the address/port seems to fail. The port is
taken to be a part of the IP address, and the IP address is shortened by
the first 2 bytes:

# openssl s_client -connect 2a00:c38:10a::1:0:71:443
getservbyname failure for c38:10a::1:0:71:443

Leaving the port empty, results in the same error:

openssl s_client -connect 2a00:c38:10a::1:0:71
getservbyname failure for c38:10a::1:0:71

Verified with OpenSSL 1.0.2e 3 Dec 2015 (Gentoo) and
OpenSSL 1.0.1f 6 Jan 2014 (Ubuntu). Both systems do have IPv6 connectivity.

Kind regards
/markus

-- 
Markus Wernig
Unix/Network Security Engineer
PGP: 8E82E4DC
SIP/XMPP: markus at wernig.net
Furch D25-SR Cut - Ovation CE C2078AX-5
-----------------------------------------
http://xfer.ch - http://markus.wernig.net
-----------------------------------------



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4100 bytes
Desc: not available
URL: <http://mta.openssl.org/pipermail/openssl-dev/attachments/20160120/d4be22f6/attachment.bin>


More information about the openssl-dev mailing list