Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with
or
.
Download ZIP

Loading…

Bug in sesion handling when using IPV6 #1012

Closed
kaplun opened this Issue · 3 comments

2 participants

@kaplun
Collaborator

Originally on 2012-04-17

Currently, if a user visits Invenio with an IPV6 address, the session will be invalid because it's not possible to extract correctly it's IP address after the changes (re-)introduced in 6459e40

Proper handling of IPV6 address must be introduced.

To reproduce the error just add in your /etc/hosts file something like:

::1     ip6-localhost ip6-loopback localhost

The browser will by default use ::1 when visiting localhost and this will trigger the session to be always invalid.

@kaplun kaplun self-assigned this
@invenio-developers
Collaborator

Originally by Samuele Kaplun samuele.kaplun@cern.ch on 2012-08-14

In c1389b2:

#CommitTicketReference repository="" revision="c1389b21328131894408f6ba7549917a8ce589ec"
WebSession: IPv6 session handling fix

- When performing a request over IPv6, disable support for
  CFG_WEBSESSION_IPADDR_CHECK_SKIP_BITS and directly
  handle the full IPv6 address.  (closes #1012)
@invenio-developers
Collaborator

Originally by Samuele Kaplun samuele.kaplun@cern.ch on 2012-08-17

In c1389b2:

#CommitTicketReference repository="" revision="c1389b21328131894408f6ba7549917a8ce589ec"
WebSession: IPv6 session handling fix

- When performing a request over IPv6, disable support for
  CFG_WEBSESSION_IPADDR_CHECK_SKIP_BITS and directly
  handle the full IPv6 address.  (closes #1012)
@invenio-developers
Collaborator

Originally by Samuele Kaplun samuele.kaplun@cern.ch on 2012-08-17

In c1389b2:

#CommitTicketReference repository="" revision="c1389b21328131894408f6ba7549917a8ce589ec"
WebSession: IPv6 session handling fix

- When performing a request over IPv6, disable support for
  CFG_WEBSESSION_IPADDR_CHECK_SKIP_BITS and directly
  handle the full IPv6 address.  (closes #1012)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Something went wrong with that request. Please try again.