[openssl/openssl] 66d51f: test: let the kernel pick the DTLS client port in ...

"'Jakub Zelenka' via openssl-commits" <[email protected]>
Newsgroups gmane.comp.encryption.openssl.cvs
Message-ID <openssl/openssl/push/refs/heads/feature/dtls-1.3/[email protected]>
  Branch: refs/heads/feature/dtls-1.3
  Home:   https://github.com/openssl/openssl
  Commit: 66d51f8f9c7b88cc7a96986b0e76f7fa112c9f53
      https://github.com/openssl/openssl/commit/66d51f8f9c7b88cc7a96986b0e76f7fa112c9f53
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-08-13 (Thu, 13 Aug 2026)

  Changed paths:
    M util/perl/TLSProxy/Proxy.pm

  Log Message:
  -----------
  test: let the kernel pick the DTLS client port in TLSProxy

For DTLS, TLSProxy picked a random port for s_client to -bind to,
probing it for availability first.  This was racy in two ways: the
probe socket was TCP while s_client binds UDP (the two port spaces
are independent, so a UDP socket held by a parallel test job was
invisible to the probe), and even a UDP probe would leave a window
between closing the probe socket and s_client binding the port.
With many tests now running under the DTLS proxy in parallel CI
jobs this caused intermittent BIO_bind EADDRINUSE failures.

Instead, drop -bind and the port probing entirely.  The kernel
assigns s_client's source port atomically on first send, and the
proxy, whose UDP socket is now left unconnected, learns the
client's address from the datagrams it receives, in the same way
any regular UDP server does.

Assisted-by: Claude:claude-fable-5
Reviewed-by: Tomas Mraz <[email protected]>
Reviewed-by: Frederik Wedel-Heinen <[email protected]>
Merge-date: Thu Aug 13 13:42:29 2026
Merged-from: https://github.com/openssl/openssl/pull/32312



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/feature/dtls-1.3/bca148-66d51f%40github.com.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.