Bug 201099

Summary:	openssl s_client IPv6 support
Product:	Base System	Reporter:	Andrey Fesenko <andrey>
Component:	misc	Assignee:	freebsd-bugs (Nobody) <bugs>
Status:	Closed FIXED
Severity:	Affects Only Me	CC:	KOT, grahamperrin, trix
Priority:	---	Keywords:	feature
Version:	CURRENT
Hardware:	Any
OS:	Any

Description Andrey Fesenko 2015-06-25 05:47:54 UTC

openssl not work with ipv6 only hosts.

% openssl s_client -connect ipv6.google.com:443 -tls1 -tlsextdebug -status
gethostbyname failure
connect:errno=0

% ncat -6 --ssl -v ipv6.google.com 443
Ncat: Version 6.47 ( http://nmap.org/ncat )
Ncat: SSL connection to 2a00:1450:4013:c01::66:443. Google Inc
Ncat: SHA-1 fingerprint: 564B C539 C2A9 5675 EA9E 2803 D2AA 0E74 59B9 7AC0

OpenBSD have long time ago
man openssl
....
-6	     Specify that s_client should attempt connections using IPv6 only.
....

FreeBSD only wiki suggestion?
In the wiki have https://wiki.freebsd.org/IPv6TODO#openssl_s_client (add WIP with GSoC2012 )

Comment 1 Graham Perrin 2023-09-15 05:26:01 UTC

With OpenSSL 3.0.10 in main, what should happen with this 2015 report?

<https://github.com/freebsd/freebsd-src/commit/cf2fc1b0f5ce501f5a29d307294e5637e0f5aba6>

Comment 2 Andrey Fesenko 2023-09-16 22:57:10 UTC

Yes

13.2 (openssl 1.1.1t) and 14.0 both work fine.