Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Certificates with IP addresses does not work with this change #308

Closed
javidh opened this issue Apr 4, 2024 · 2 comments · Fixed by #312
Closed

Certificates with IP addresses does not work with this change #308

javidh opened this issue Apr 4, 2024 · 2 comments · Fixed by #312

Comments

@javidh
Copy link

javidh commented Apr 4, 2024

With this change, if we have a certificate for an ip address, it will throw an error:

servername: net.isIP(servername) ? undefined : servername,

It's not clear to me why this has been added but in many scenarios (especially with k8s structure where certificates are for ip addresses), this will break.

@TooTallNate
Copy link
Owner

I actually don't really recall what that was for. I want to say it was related to the tests, or perhaps I just didn't think it was possible to generate a cert with an IP address. In any case, it seems like the tests pass with the check removed (see #312).

TooTallNate added a commit that referenced this issue Apr 6, 2024
@TooTallNate
Copy link
Owner

FWIW, Node prints this warning when an IP address is used for servername:

(node:28639) [DEP0123] DeprecationWarning: Setting the TLS ServerName to an IP address is not permitted by RFC 6066. This will be ignored in a future version.
(Use node --trace-deprecation ... to show where the warning was created)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants