1
0
spegling av https://github.com/therootcompany/greenlock.js.git synced 2024-11-16 17:29:00 +00:00

Jämför commits

..

2 Incheckningar

Upphovsman SHA1 Meddelande Datum
108e59ef8b v2.4.4: update error message 2018-11-04 17:17:48 -07:00
e71298c305 better error message for domain fronting 2018-11-04 17:17:16 -07:00
2 ändrade filer med 8 tillägg och 3 borttagningar

Visa fil

@ -521,8 +521,13 @@ Greenlock.create = function (gl) {
if (req.socket && 'string' === typeof req.socket.servername) {
if (safehost && (safehost !== req.socket.servername.toLowerCase())) {
res.statusCode = 400;
res.end("Don't be frontin', yo!"
+ " TLS SNI '" + req.socket.servername.toLowerCase() + "' does not match 'Host: " + safehost + "'");
res.setHeader('Content-Type', 'text/html; charset=utf-8');
res.end(
"<h1>Domain Fronting Error</h1>"
+ "<p>This connection was secured using TLS/SSL for '" + req.socket.servername.toLowerCase() + "'</p>"
+ "<p>The HTTP request specified 'Host: " + safehost + "', which is (obviously) different.</p>"
+ "<p>Because this looks like a domain fronting attack, the connection has been terminated.</p>"
);
return;
}
} else if (safehost && !gl.middleware.sanitizeHost._skip_fronting_check) {

Visa fil

@ -1,6 +1,6 @@
{
"name": "greenlock",
"version": "2.4.3",
"version": "2.4.4",
"description": "Let's Encrypt for node.js on npm",
"main": "index.js",
"files": [