mirror of
https://blitiri.com.ar/repos/chasquid
synced 2026-06-17 20:43:36 +00:00
fcf2cae120
In Go 1.10 the TLS library will start to reject DNS SANs which are not properly formed; and in particular, if they're not IDNA-encoded. See: - https://github.com/golang/go/issues/15196 - https://github.com/golang/go/commit/9e76ce70701ceef8fbccfb953b33a2ae7fe0367c The generate_cert utility will write non-IDNA DNS SANs, which the TLS library does not like, causing our idna tests to fail. This patch fixes this incompatibility by making generate_cert IDNA-encode the host names when adding them to the certificate.