[Swan-commit] Changes to ref refs/heads/main
cagney at vault.libreswan.fi
Tue Jan 5 14:18:12 UTC 2021
Author: Andrew Cagney <cagney at gnu.org>
Date: Mon Jan 4 16:55:43 2021 -0500
ip: hack ttoaddr()/domain_to_address() so that it prefers IPv4
Whack, unless told otherwize, defaults to IPV4. This is at odds with
ttoaddr() which prefers IPv6 (has since forever). If whack's default
is removed, configurations in the field using DNS will suddenly flip
from IPv4 to IPv6.
While the correct fix is probably to try both addresses, we're not
there yet. So instead prefer IPv4 over IPv6.
This affects the following lookups:
- redirect when it resolves the GW Identity received over the wire
- resovling pluto's option --global-redirect-to <address>
- resolving DNS hostname
(whack --initiate calls ttoaddr() but throws away the result).
More information about the Swan-commit