Hacker News Reader

Comment by losvedir | Hacker News Reader

Five years is a long time. However, with something as important as OpenSSL, some degree of discretion and evaluation should be done before patches are merged.

Does anyone know the reason for the delay? I can't imagine that it's just them being lazy, for instance. Maybe they don't have the time and resources to properly analyze something as critical as this?

Edit: I guess what I mean to say is, for OpenSSL I'd rather have no feature than a feature with a security vulnerability.

View on HN

Found on the openSSL dev list:

Newsgroups: mailing.openssl.dev From: ku...@tenebras.com (Michael Sierchio) Date: Wed, 30 Jul 2008 08:02:41 -0700 Local: Wed, Jul 30 2008 3:02 pm Subject: Re: IPv6 support in OpenSSL Ravindra wrote: > I'm looking for information regarding IPv6 support in OpenSSL. > Which is the first and stable version that adds support for IPv6 in OpenSSL ?

SSL operates atop TCP. Whether this supports IPv6 is left as an exercise for the reader. - M

PS Does your web browser support IPv6? Does your monitor? How about your keyboard? ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-...@openssl.org Automated List Manager majord...@openssl.org

If you add two ' '(space) characters in front of a line, HN will stop "formatting" your text.

awesome I've been trying to figure out how to do that myself. Is there any place that has a list of all of these things?

https://news.ycombinator.com/formatdoc (it's linked from the FAQ)

I honestly can't see why that isn't linked from the posting page.

What's even more strange is that it isn't linked from the new post page, as you said, but it is linked from the edit post page.

The complaint was specifically about IPv6 support in s_client though. Hardly seems to be something that would add any risk to openssl itself (though I haven't looked at what the patches touch). s_client is a handy tool when you need it, but I'd wager that it's one of the least-used utilities the openssl suite. It may just be a case of limited resources focusing on stuff that has much higher usage.

Thing is, OpenSSL itself fully support IPv6, the hangup is in s_client and s_server (the generic SSL/TLS command-line client and server).

And as noted in the bug tracker, OpenBSD has been running with a patched s_client for quite some time.

Reply on news.ycombinator.com