Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(router) remove last dot in FQDNs #8269

Merged
merged 1 commit into from
Jan 11, 2022
Merged

fix(router) remove last dot in FQDNs #8269

merged 1 commit into from
Jan 11, 2022

Conversation

locao
Copy link
Contributor

@locao locao commented Jan 7, 2022

Summary

When a route has an SNI attribute containing an FQDN ending in a dot, the trailing dot was being used to match routes. But according to RFC-3546, this trailing dot is not part of the hostname, thus must not be used for matching.

This change updates the route marshaling function to not include the trailing dot in this case.

Full changelog

  • Remove trailing dot from SNIs in route marshaling function.
  • Added test for specific case.

Issue reference

Fix #7550
CT-236

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Trailing dots in upstream hostnames are incorrectly included in TLS SNI extension
3 participants