allow requesting a certificate for autodiscover.<domain>, but don't recommend a DNS record that would make requests to it.

this may help testing again in the future. autodiscover with outlook is not
working now.
This commit is contained in:
Mechiel Lukkien
2023-02-03 17:53:45 +01:00
parent c21b8c0d54
commit ae60cdac7e
2 changed files with 13 additions and 4 deletions

View File

@ -193,12 +193,17 @@ func (c *Config) allowACMEHosts() {
for _, dom := range c.Dynamic.Domains {
if l.AutoconfigHTTPS.Enabled {
d, err := dns.ParseDomain("autoconfig." + dom.Domain.ASCII)
if err != nil {
if d, err := dns.ParseDomain("autoconfig." + dom.Domain.ASCII); err != nil {
xlog.Errorx("parsing autoconfig domain", err, mlog.Field("domain", dom.Domain))
continue
} else {
m.AllowHostname(d)
}
if d, err := dns.ParseDomain("autodiscover." + dom.Domain.ASCII); err != nil {
xlog.Errorx("parsing autodiscover domain", err, mlog.Field("domain", dom.Domain))
} else {
m.AllowHostname(d)
}
m.AllowHostname(d)
}
if l.MTASTSHTTPS.Enabled && dom.MTASTS != nil {