Browse Source

v2.4.8: only do fronting checks on TLS sockets

v2.5 v2.4.8
AJ ONeal 5 years ago
parent
commit
2abdfcc665
  1. 3
      index.js
  2. 2
      package.json

3
index.js

@ -557,7 +557,8 @@ Greenlock.create = function (gl) {
req.headers.host = host.join(':');
}
if (!gl.__sni_allow_domain_fronting) {
// Note: This sanitize function is also called on plain sockets, which don't need Domain Fronting checks
if (req.socket.encrypted && !gl.__sni_allow_domain_fronting) {
if (req.socket && 'string' === typeof req.socket.servername) {
// Workaround for https://github.com/nodejs/node/issues/22389
if (!gl._checkServername(safehost, req.socket.servername.toLowerCase())) {

2
package.json

@ -1,6 +1,6 @@
{
"name": "greenlock",
"version": "2.4.7",
"version": "2.4.8",
"description": "Let's Encrypt for node.js on npm",
"main": "index.js",
"files": [

Loading…
Cancel
Save