[sslh] sslh not working together with curl

Matthias Fechner idefix at fechner.net
Tue Feb 10 10:24:27 CET 2015


Am 08.02.2015 um 09:57 schrieb Yves Rutschle:
> Ah. Does it work if sslh runs IPv6 only?
> 
> How about if you add --numeric to sslh?
> (wild guess: reverse DNS is slow for IPv6 for some reason
> which messes up the detection)

i have no idea.
sslh is currently only listen on ipv4 address.
I was not able to configue it to bind to the ipv6 address.

My config files look like:
verbose: false;
foreground: false;
inetd: false;
numeric: true;
timeout: 4;
user: "nobody";
pidfile: "/var/run/sslh.pid";


# Change hostname with your external address name.
listen:
(
    { host: "IP"; port: "443"; }
);

protocols:
(
     { name: "ssh"; service: "ssh"; host: "localhost"; port: "22";
probe: "builtin"; },
     { name: "openvpn"; host: "localhost"; port: "1194"; probe:
"builtin"; },
     { name: "xmpp"; host: "localhost"; port: "5222"; probe: "builtin"; },
     { name: "http"; host: "localhost"; port: "80"; probe: "builtin"; },
     { name: "ssl"; host: "localhost"; port: "443"; probe: "builtin"; },
     { name: "anyprot"; host: "localhost"; port: "443"; probe: "builtin"; }
);

IP is holding the IPv4 address of the server.

If I try to add a new line in listen section like
    { host: "IPv6IP; port: "443"; }

For the IPv6IP I used a normal IPv6 IP like 2a01:138:....

If I insert the second line sslh refuses to start so I guess sslh cannot
handle IPv6?

Gruß
Matthias

-- 

"Programming today is a race between software engineers striving to
build bigger and better idiot-proof programs, and the universe trying to
produce bigger and better idiots. So far, the universe is winning." --
Rich Cook



More information about the sslh mailing list