I think that's correct. I believe this may have been missed when
"dns" was introduced in pledged - openssl got done early.
On Mon, Nov 30, 2015 at 6:12 PM, Theo Buehler wrote:
> On Fri, Nov 20, 2015 at 01:58:57PM +0100, Jérémie Courrèges-Anglas wrote:
>> "Todd T. Fries"
"Todd T. Fries" writes:
> To demonstrate:
>
> openssl s_client -connect www.google.com:443
Heh.
> A fix, probably not the full or correct one:
ok jca@
do_accept(), in s_socket.c calls gethostbyaddr, then gethostbyname if
the former fails...
> Index: openssl.c
>
To demonstrate:
openssl s_client -connect www.google.com:443
A fix, probably not the full or correct one:
Index: openssl.c
===
RCS file: /cvs/src/usr.bin/openssl/openssl.c,v
retrieving revision 1.19
diff -u -p -u -r1.19 openssl.c