Actions
Bug #17000
openAllow IPv6 SAN entries
Start date:
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
Description
There are multiple problems using bare IPv6 addresses in SAN entries:
- The ACME SAN validation currently only checks for hostnames and wildcard hostnames. It allows IPv4 addresses as well, as those pass the hostname validation, but it does not allow IPv6 addresses.
- It does not appear to be listening properly for IPv6 validation using standalone modes (HTTP or TLS-ALPN)
Actions