all repos — homestead @ 7f5f16f26bf27a8ad6f87e559649abf22ef8ec11

Code for my website

tls: strip IPv6 brackets before enabling certmagic

Alan Pearce
commit

7f5f16f26bf27a8ad6f87e559649abf22ef8ec11

parent

e162e61f778342b4bd3fad92b5a16a75147428c1

1 file changed, 6 insertions(+), 1 deletion(-)

jump to
M internal/server/tls.go → internal/server/tls.go
@@ -50,11 +50,16 @@
 		// caddy's ACME server (step-ca) doesn't specify an OCSP server
 		cfg.OCSP.DisableStapling = true
 
+		listenAddress := s.runtimeConfig.ListenAddress
+		if listenAddress[0] == '[' {
+			listenAddress = listenAddress[1 : len(listenAddress)-1]
+		}
+
 		cfg.Issuers[0] = certmagic.NewACMEIssuer(cfg, certmagic.ACMEIssuer{
 			CA:                      s.runtimeConfig.ACMECA,
 			TrustedRoots:            cp,
 			DisableTLSALPNChallenge: true,
-			ListenHost:              s.runtimeConfig.ListenAddress,
+			ListenHost:              listenAddress,
 			AltHTTPPort:             s.runtimeConfig.Port,
 			AltTLSALPNPort:          s.runtimeConfig.TLSPort,
 		})