OCSP server responds to TCPv6 connections(AF_INET6 socket), I have tried. But if I use standard TCPv4 socket(for example BIO_do_connect or manually created AF_INET socket) it doesn't respond and I see openssl errors:

2992:error:0200274D:system 
library:connect:reason(1869):.\crypto\bio\bss_conn.c:269:host=127.0.0.1:7777
2992:error:20073067:BIO routines:CONN_STATE:connect 
error:.\crypto\bio\bss_conn.c:273:

There is no creation of TCPv4 listening socket by OCSP responder. It is not responding to IPv4 connections but it is responding to IPv6 connections, I don't understand how ipv4-mapped-ipv6 addresses can be useful.


---------------------------------------------------------
From: Wim Lewis
Sent: Wednesday, October 10, 2012 10:05 PM
To: [email protected]
Subject: Re: Why simple OCSP server listen only TCPv6 connections on Windows?


On 10 Oct 2012, at 4:58 AM, Vladimir Belov wrote:
After I got the message “Waiting for OCSP client connections...” I see that process openssl.exe listen only TCPv6 port 7777, no TCPv4.

How to set up OCSP responder to handle IPv4-connections? Or the only way is to use only IPv6-connection to the OpenSSL OCSP responder?

Are you sure that it is not responding to IPv4 connections on its ipv6 socket 
using ipv4-mapped-ipv6 addresses?


______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager [email protected]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to