-
-
Notifications
You must be signed in to change notification settings - Fork 646
[client] set TLS ServerName for hostname-based QUIC connections #3673
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
26963b5
to
2fce2ad
Compare
The URL may not have a port number in the URL string. Could you support this scenario too? |
@pappz Done. |
@alindt I recommend that you create a function that figures out the serverName from the given URL string properly. I take a quick look to the WS package, the first step is the URL string will be converted to URL type and after that the net.SplitHostPort |
@pappz I don't understand what you mean by "losing the URL path". The only way the QUIC dialer uses The only change is in appending the default ports as per your request, meaning it will always include a Sorry, am I missing something? |
When connecting to a relay server by hostname, certificates are validated against the IP address instead of the hostname. This change sets ServerName in the TLS config when connecting via hostname, ensuring proper certificate validation.
6a11d67
to
93ce649
Compare
|
You are right. I mixed the things a little bit. I take a look again. |
Any update on if this will be pulled in. I think it's stopping my clients connecting to relay using quic |
This sets ServerName in the TLS config when using hostnames to fix the validation.
Issue ticket number and link
Potentially fixes #3672
Stack
Checklist