[JIRA] Commented: (SSPCPP-326) Abbreviated IPv6 address format and CIDR support for acl

[Kaspar Brand (JIRA)]

    [ https://issues.shibboleth.net/jira/browse/SSPCPP-326?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13553#comment-13553 ] 

Kaspar Brand commented on SSPCPP-326:
-------------------------------------

For the records: "2001:620::::::1234" isn't a valid IPv6 address ("::", which is used for zero compression, may only appear once).

I suggest to canonicalize IPv6 addresses to the format which is recommended in section 4 of http://www.ietf.org/rfc/rfc5952.txt before doing comparisons.

> Abbreviated IPv6 address format and CIDR support for acl
> --------------------------------------------------------
>
>                 Key: SSPCPP-326
>                 URL: https://issues.shibboleth.net/jira/browse/SSPCPP-326
>             Project: Shibboleth SP - C++
>          Issue Type: Improvement
>          Components: Configuration
>            Reporter: Lukas Hämmerle
>            Assignee: Scott Cantor
>            Priority: Minor
>             Fix For: 2.5
>
>   Original Estimate: 1 week
>  Remaining Estimate: 1 week
>
> We are actively polling the status handlers of the Service Providers in our federation. Therefore, we instruct deployers to add the IP addresses of our polling host. However, if possible we would rather like to have them configure a range of IPs instead of single IP addresses. Therefore, support for the CIDR notation would be great. For the Identity Provider this already has been possible for a while.
> Also, we noted that abbreviated IPv6 addresses are not accepted. This means that
> 2001:620:0:0:0:0:0:1234 will be accepted 
> whereas 
> 2001:620::::::1234 won't.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira