Project

General

Profile

Actions

Bug #17000

open

Allow IPv6 SAN entries

Added by Jim Pingle 1 day ago. Updated about 21 hours ago.

Status:
Feedback
Priority:
Normal
Assignee:
Category:
ACME
Target version:
-
Start date:
Due date:
% Done:

100%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:

Description

There are multiple problems using bare IPv6 addresses in SAN entries:

  • The ACME SAN validation currently only checks for hostnames and wildcard hostnames. It allows IPv4 addresses as well, as those pass the hostname validation, but it does not allow IPv6 addresses.
  • It does not appear to be listening properly for IPv6 validation using standalone modes (HTTP or TLS-ALPN)
Actions

Also available in: Atom PDF