Re: [Sks-devel] [PATCH] Bundle IPv6, DNS fixes, sks dump fix

[Kim Minh Kaplan]

Hello Phil,

sorry for the late reply, I was working on the patches for the release.
By now most of your remarks have been answered one way or another :-)

Phil Pennock writes:

> For the new config rules of yours, sks.pod should probably show how to
> enable IPv6 cleanly with:
>   hkp_address: 0.0.0.0 ::
> to just bind to multiple families -- assuming of course that this is
> supported (it represents the defaults in my version).

Yes some explanations on this one are needed.  Especially since it is
tricky.  If someone can turn this into wordings suitable for sks.pod it
would be great.

For hkp_address the default value is "0.0.0.0" meaning all of this
host's IPv4 addresses.

For IPv6 the setting is different depending on you system.  Where
IP6_V6ONLY is the default (it seems FreeBSD is among them) then *adding*
"::" should be fine (i.e. "hkp_address: 0.0.0.0 ::").  Where it is not
(Linux for example) then you have to *replace* the default with "::"
(i.e. "hkp_address: ::").

Regarding recon_address some additional care is needed because other
SKS peers use the IP address for authentication purposes.  As current
SKS code does *not* support IPv4 mapped address you should *not* use
"::" on systems where they are the default (Linux for example).

If your host has multiple addresses you should list them so that SKS
knows which ones to use for outgoing connexions.  I.e. "recon_address:
192.168.210.7 3fb0::1234".  Thus this The Right Thing.

Kim Minh.