DevFW-CICD/ingress-nginx-helm
16
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Serve correct TLS certificate for requests with uppercase host

Browse source
This commit is contained in:
Andreas Sommer 2020-06-05 17:19:09 +02:00 committed by Manuel Alejandro de Brito Fontes
parent 3d3efaab29
commit f27b404421
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
rootfs/etc/nginx/lua/certificate.lua
View file

@ -46,7 +46,10 @@ local function set_der_cert_and_key(der_cert, der_priv_key)
end
local function get_pem_cert_uid(raw_hostname)
local hostname = re_sub(raw_hostname, "\\.$", "", "jo")
-- Convert hostname to ASCII lowercase (see RFC 6125 6.4.1) so that requests with uppercase
-- host would lead to the right certificate being chosen (controller serves certificates for
-- lowercase hostnames as specified in Ingress object's spec.rules.host)
local hostname = re_sub(raw_hostname, "\\.$", "", "jo"):gsub("[A-Z]", function(c) return c:lower() end)
local uid = certificate_servers:get(hostname)
if uid then