v2.4.8: only do fronting checks on TLS sockets
This commit is contained in:
parent
bc13451368
commit
2abdfcc665
3
index.js
3
index.js
|
@ -557,7 +557,8 @@ Greenlock.create = function (gl) {
|
||||||
req.headers.host = host.join(':');
|
req.headers.host = host.join(':');
|
||||||
}
|
}
|
||||||
|
|
||||||
if (!gl.__sni_allow_domain_fronting) {
|
// Note: This sanitize function is also called on plain sockets, which don't need Domain Fronting checks
|
||||||
|
if (req.socket.encrypted && !gl.__sni_allow_domain_fronting) {
|
||||||
if (req.socket && 'string' === typeof req.socket.servername) {
|
if (req.socket && 'string' === typeof req.socket.servername) {
|
||||||
// Workaround for https://github.com/nodejs/node/issues/22389
|
// Workaround for https://github.com/nodejs/node/issues/22389
|
||||||
if (!gl._checkServername(safehost, req.socket.servername.toLowerCase())) {
|
if (!gl._checkServername(safehost, req.socket.servername.toLowerCase())) {
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
{
|
{
|
||||||
"name": "greenlock",
|
"name": "greenlock",
|
||||||
"version": "2.4.7",
|
"version": "2.4.8",
|
||||||
"description": "Let's Encrypt for node.js on npm",
|
"description": "Let's Encrypt for node.js on npm",
|
||||||
"main": "index.js",
|
"main": "index.js",
|
||||||
"files": [
|
"files": [
|
||||||
|
|
Loading…
Reference in New Issue