47834 - PSM support for IPv6

Status: VERIFIED FIXED

(Core :: Security: PSM, defect, P3)

Description

[John G. Myers]

PSM needs to support IPv6 addresses.

Comment 1

[John G. Myers]

Attachment: proposed fix

Comment 2

[John G. Myers]

Adding testcase URL.  Userid/password: dummy

Comment 3

[John G. Myers]

*** Bug 53304 has been marked as a duplicate of this bug. ***

Comment 4

[Shawn Starr]

hrm.. forgot about this "bug", in any case, IPv6 in the current PSM is working
now for me.

Comment 5

[John Unruh]

I cannot reach the above site, so IPv6 appears to not be supported yet.

Comment 6

[John Unruh]

Changing QA contact to nitinp

Comment 7

[John Unruh]

Mass reassigning nitinp's bugs to me.

Comment 8

[Wan-Teh Chang]

This bug depends on NSS bug #48657, which was
fixed in NSS 3.1.  Since PSM is using NSS 3.1.1
now, I request that this bug be considered for
the next PSM release so that PSM can do SSL over
IPv6.

Comment 9

[John Unruh]

nsbeta1

Comment 10

[David P. Drinan]

The patch looks good to me. r=ddrinan.

Comment 11

[Brendan Eich [:brendan]]

Nit picked in code that predates the patch, but was modified by it:

!         prstatus = PR_GetIPNodeByName(conn->hostName, PR_AF_INET6, PR_AI_DEFAULT,
! 	
	buffer, 256, &hostentry);

Use sizeof buffer instead of 256.  (Style whine: indent buffer to underhang the
first actual param, conn->hostName.)

Fix the above and sr=[e-mail]. Thanks,

/be

Comment 12

[Brendan Eich [:brendan]]

Forgot to add that diff -u rules, please use it when generating patches for best
readability -- thanks.

/be

Comment 13

[John G. Myers]

Fix checked in.

Comment 14

[John Unruh]

Reopening. With the 1-2-00 WinNT trunk build, I cannot reach the above site, so 
IPv6 appears to not be supported yet.

Comment 15

[John G. Myers]

The test site in the URL does not appear to be in the DNS any more.

Even if it were there, this bug could only be tested on an OS which has IPv6 
support connected to an IPv6 capable network.  Windows and MacOS do not yet have 
IPv6 support.  Linux only has IPv6 support if the kernel is compiled with that 
support explicitly enabled.  The Netscape firewall does not pass IPv6 packets 
through to the Internet, so internal testers can only test against internal 
servers.

Reclosing FIXED.  CC'ing [e-mail], who provided the test case 
URL in a duplicate bug.  Hopefully [e-mail] will be able to 
verify this bug.

Comment 16

[John Unruh]

Marking verified if there are no further objections.