openssh bugs - Sep 2014 - [Bug 2279] New: ListenAddress option does not allow IPv6 link-local addresses

https://bugzilla.mindrot.org/show_bug.cgi?id=2279

            Bug ID: 2279
           Summary: ListenAddress option does not allow IPv6 link-local
                    addresses
           Product: Portable OpenSSH
           Version: 6.6p1
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: normal
          Priority: P5
         Component: sshd
          Assignee: unassigned-bugs at mindrot.org
          Reporter: glee at ciena.com

When a link-local address is used with ListenAddress, the resulting
bind() will fail with error as per the following log entry:
error: Bind to port 22 on fe80::202:5555:fe01:dddd failed: Invalid
argument.

When using link-local, the sin6_scope_id must be set to specify which
interface should be used with the link-local address.  There does not
appear to be any handling for this in server_listen() function.

I believe the ListenAddress should allow a link-local with %<zone_id>
allowing the interface name or index to be specified as per RFC4007. 
The specified interface needs to then result in a sin6_scope_id
assignment prior to the bind() in server_listen().  (Since the
inclusion of an interface name would result in longer strings, the code
needs to be checked that longer addresses with ListenAddress will be
accepted.)  The if_nametoindex() function may be needed to convert an
interface name into its respective index which gets used as the
sin6_scope_id value.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2279

--- Comment #1 from Garrett Lee <glee at ciena.com> ---
After revisiting this issue I am now discovering that, indeed, IPv6
link-local addresses can be used with ListenAddress as long as they
include the RFC4007 format. This does not appear to be a bug.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2279

Garrett Lee <glee at ciena.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2279

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
Close all resolved bugs after 7.3p1 release

-- 
You are receiving this mail because:
You are watching the assignee of the bug.