[EXT] SubjectConfirmationData Address & IPv6

[Yeargan, Yancey]

If the default format for IPv6 addresses should change in new versions of the IdP, legacy installs would need to continue using the old format indefinitely. In that scenario, some way to choose (override) the format on a per relying party level within the IdP would be appropriate. New versions of the SP could accept an IPv6 address with or without the brackets. Perhaps the SP does that already.

Yancey Yeargan
IT Manager
IT Shared Services
________________________________
UNIVERSITY OF NORTH TEXAS SYSTEM
Office: 940.369.7521


On Jul 26, 2019, at 11:01 AM, Cantor, Scott <cantor.2 at osu.edu<mailto:cantor.2 at osu.edu>> wrote:

I know roughly nothing about IPv6 but if the standard is reasonably explicit about what to do then I'm quite comfortable treating it as a bug.

It's odd that the Shibboleth SP doesn't notice this though, so I'd have to look into why. Perhaps the brackets are the norm when reading REMOTE_ADDR anyway. So the problem is that I suspect if we "fix" this it will just break our SP in the bargain without patches there.

-- Scott


--
For Consortium Member technical support, see https://nam04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwiki.shibboleth.net%2Fconfluence%2Fx%2FcoFAAg&data=02%7C01%7CYancey.Yeargan%40untsystem.edu%7C7a7fcd024c734905000d08d711e2c71a%7C70de199207c6480fa318a1afcba03983%7C0%7C0%7C636997538007850965&sdata=6JokxKU%2Bdl89VfdC1JnA5SrzgFQMycnLlUpPkLiCLYk%3D&reserved=0
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net<mailto:users-unsubscribe at shibboleth.net>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20190726/29732e50/attachment.html>