mirror of
https://gitlab.com/openconnect/ocserv.git
synced 2026-10-06 22:32:05 +08:00
Dimitri PapadopoulosandNikos Mavrogiannopoulos
3206e11665
IPv6 address leases were starting at the network address + 1, following the IPv4 convention where the network address is reserved. However, IPv6 doesn't have such a restriction, and that behaviour is inconsistent with IPv6 standards. Use the IPv6 network address as the server-side tunnel address instead of network address + 1, as described in REQ-MAIN-NET-006. This fix is particularly important for point-to-point /127 networks with only 2 addresses. It also prevents a client with ipv6-subnet-prefix < 128 from being leased the first subnet, which contained the server address. This changes the server-side address of every IPv6 deployment; the existing tests are updated accordingly. Resolves: #714 Signed-off-by: Dimitri Papadopoulos <3350651-DimitriPapadopoulos@users.noreply.gitlab.com>