5 ms·
Five years is a long time. However, with something as important as OpenSSL, some degree of discretion and evaluation should be done before patches are merged.
by losvedir 15y ago
Five years is a long time. However, with something as important as OpenSSL, some degree of discretion and evaluation should be done before patches are merged.
Does anyone know the reason for the delay? I can't imagine that it's just them being lazy, for instance. Maybe they don't have the time and resources to properly analyze something as critical as this?
Edit: I guess what I mean to say is, for OpenSSL I'd rather have no feature than a feature with a security vulnerability.
- ams6110 15y agoThe complaint was specifically about IPv6 support in s_client though. Hardly seems to be something that would add any risk to openssl itself (though I haven't looked at what the patches touch). s_client is a handy tool when you need it, but I'd wager that it's one of the least-used utilities the openssl suite. It may just be a case of limited resources focusing on stuff that has much higher usage.
- spdegabrielle 15y agoFound on the openSSL dev list: Newsgroups: mailing.openssl.dev From: ku...@tenebras.com (Michael Sierchio) Date: Wed, 30 Jul 2008 08:02:41 -0700 Local: Wed, Jul 30 2008 3:02 pm Subject: Re: IPv6 support in OpenSSL Ravindra wrote: > I'm looking for information regarding IPv6 support in OpenSSL. > Which is the first and stable version that adds support for IPv6 in OpenSSL ? SSL operates atop TCP. Whether this supports IPv6 is left as an exercise for the reader. - M PS Does your web browser support IPv6? Does your monitor? How about your keyboard? ______________________________________________________________________ OpenSSL Project http://www.openssl.org http://www.openssl.org Development Mailing List openssl-...@openssl.org Automated List Manager majord...@openssl.org
- burgerbrain 15y agoIf you add two ' '(space) characters in front of a line, HN will stop "formatting" your text.
- simcop2387 15y agoawesome I've been trying to figure out how to do that myself. Is there any place that has a list of all of these things?
- icebraining 15y agohttps://news.ycombinator.com/formatdoc https://news.ycombinator.com/formatdoc (it's linked from the FAQ)
- steve-howard 15y agoI honestly can't see why that isn't linked from the posting page.
- icebraining 15y agoWhat's even more strange is that it isn't linked from the new post page, as you said, but it is linked from the edit post page.
- masklinn 15y agoThing is, OpenSSL itself fully support IPv6, the hangup is in s_client and s_server (the generic SSL/TLS command-line client and server). And as noted in the bug tracker, OpenBSD has been running with a patched s_client for quite some time.