Mechiel Lukkien 797c1cf9f0

do not log an error for tls requests with ipv6 addresses as sni server name ...

ip addresses are invalid in server names. for ipv6 addresses, the
autocert.GetCertificate calls would return an error, which we logged, and
increased a metric about. but the alerts for this situation aren't helpful. so
recognize ip addresses early. if we are lenient about unknown server names (for
incoming smtp deliveries), we switch to the fallback hostname, otherwise we
return an error.

this was the error logged:

	l=error m="requesting certificate" err="acme/autocert: server name component count invalid"

for ipv4 addresses, the name wouldn't be in our allowlist and should already
have caused us to switch to the fallback hostname.

2025-02-23 10:46:39 +01:00

..

autotls_test.go

implement ACME external account binding (EAB)

2023-12-22 11:50:50 +01:00

autotls.go

do not log an error for tls requests with ipv6 addresses as sni server name

2025-02-23 10:46:39 +01:00