Skip Menu |
 

This queue is for tickets about the IO-Socket-SSL CPAN distribution.

Report information
The Basics
Id: 131384
Status: resolved
Priority: 0/
Queue: IO-Socket-SSL

People
Owner: Nobody in particular
Requestors: kiskele [...] krc.hu
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: ip_in_cn not working with IPv6 address
Download (untitled) / with headers
text/plain 493b
Hi I found some issues with IO::Socket::SSL when we are adding IPv6 address to Common Name of the certificate. if ( $identity eq $commonName ) { return 1 if $scheme->{ip_in_cn} == 4 ? length($ipn) == 4 : $scheme->{ip_in_cn} == 6 ? length($ipn) == 8 : 1; } 1. Here ip_in_cn == 1 is not handled. 2. length($ipn) is 16 byte in case of IPv6. Best Regards, Tamas Kelemen
Download (untitled) / with headers
text/plain 472b
Am Di 07. Jan 2020, 06:40:30, kiskele@krc.hu schrieb: Show quoted text
> Hi > > I found some issues with IO::Socket::SSL when we are adding IPv6 > address to Common Name of the certificate.
Thanks for your report. You are right regarding IPv6 - I've fixed this in commit 86f80e5. As for ip_in_cn == 1 - this case should be implicitly handled already and should behave as documented (i.e. it does not need to be 1, can only be 5 etc, only 4 and 6 have special meanings). Regards, Steffen


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.