Actions
Bug #17000
open
Allow IPv6 SAN entries
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
Description
There are multiple problems using bare IPv6 addresses in SAN entries:
- The ACME SAN validation currently only checks for hostnames and wildcard hostnames. It allows IPv4 addresses as well, as those pass the hostname validation, but it does not allow IPv6 addresses.
- It does not appear to be listening properly for IPv6 validation using standalone modes (HTTP or TLS-ALPN)
Updated by Jim Pingle about 21 hours ago
- Status changed from New to In Progress
The validation problem is an easy fix, but the second point is actually an upstream bug in acme.sh and how it uses socat:
https://github.com/acmesh-official/acme.sh/issues/7185
I intend to add the change I suggested there to our local fork, but if they opt for a different approach upstream that will need to be reverted and we may need additional changes in the code that calls acme.sh depending on the options they want.
Updated by Jim Pingle about 21 hours ago
- Status changed from In Progress to Feedback
- % Done changed from 0 to 100
Fixed in ACME pkg v1.3.2
Actions