[sslh] sslh-1.9 released!

Yves Rutschle yves at naryves.com
Wed Aug 3 13:01:14 CEST 2011


Hi Matt,

On Wed, Aug 03, 2011 at 10:28:58AM +0100, Matt Smith wrote:
> I'm
> guessing it's not parsing the IPv6 address properly because of the :
> characters in the address being the same as the port number
> declaration? 

I don't think that'd be a problem, I don't think an IPv6
address followed with a port number is ambiguous and sslh
just separates the port from the address by using the last
':'.

> If I changed it to the name "tao" then I guess there
> could be confusion between the v4 and v6 address and it wouldn't know
> exactly which one I wanted?
> 
> root at tao[~]# host tao
> tao.xtaz.co.uk has address 192.168.1.2
> tao.xtaz.co.uk has IPv6 address 2a01:348:294::1

That's a good point -- I guess you'd expect sslh to bind
both addresses if the hostname resolved to two addresses?
I'll look into that. (that's exactly the kind of feedback
I'm looking for: real-world IPv6 setups).


> root at tao[~]# ./bin/sslh-select -t 2 -u nobody -p 192.168.1.2:443 -p
> 2a01:348:294::1:443 --ssh 127.0.0.1:22 --ssl 127.0.0.1:443
> ¿G(Ôæ¿¿         (:(ç¿¿:bind: Invalid argument
> 
> Saying that I've also just tried removing the IPv6 bind and I get the same:
> 
> root at tao[~]# ./bin/sslh-select -t 2 -u nobody -p 192.168.1.2:443 --ssh
> 127.0.0.1:22 --ssl 127.0.0.1:443
> ¿G(ôæ¿¿         (:(¬ç¿¿:bind: Invalid argument

ok, "something" is behaving differently between FreeBSD and
Linux; I can reproduce it, so debugging shouldn't be too
hard. Hopefully I'll have a fix soon.

Cheers,
Y.



More information about the sslh mailing list