ACME: Fix TLS-ALPN.

OpenSSL on FreeBSD doesn't have -4/-6 yet, so remove the listen choice.
pfsense · Jan 25, 2019 · b7024a0 · b7024a0
1 parent 799f100
commit b7024a0
Show file tree

Hide file tree

Showing 3 changed files with 2 additions and 6 deletions.
diff --git a/security/pfSense-pkg-acme/Makefile b/security/pfSense-pkg-acme/Makefile
@@ -1,7 +1,7 @@
 # $FreeBSD$
 
 PORTNAME=	pfSense-pkg-acme
-PORTVERSION=	0.5.2
+PORTVERSION=	0.5.3
 CATEGORIES=	security
 MASTER_SITES=	# empty
 DISTFILES=	# empty

diff --git a/security/pfSense-pkg-acme/files/usr/local/pkg/acme/acme.inc b/security/pfSense-pkg-acme/files/usr/local/pkg/acme/acme.inc
@@ -225,9 +225,6 @@ $acme_domain_validation_method['standalonetls'] = array('name' => "standalone TL
 		'port' => array('name'=>"port",'columnheader'=>"Port",'type'=>"textbox",'size'=>"50",
 			'description' =>"TLS listen port for stand-alone server. Must be 443 or have port 443 on WAN forwarded to this port. Firewall rules must also allow traffic to reach this port."
 		),
-		'ipv6' => array('name'=>"ipv6",'columnheader'=>"IPv6",'type'=>"checkbox",
-			'description' =>"Bind to IPv6 instead of IPv4."
-		)
 	));
 $acme_domain_validation_method['dns_manual'] = array('name' => "DNS-Manual",
 	'fields' => array(

diff --git a/security/pfSense-pkg-acme/files/usr/local/pkg/acme/acme_sh.inc b/security/pfSense-pkg-acme/files/usr/local/pkg/acme/acme_sh.inc
@@ -221,8 +221,7 @@ EOF;
 					$domainparameters = " --standalone {$listen} --httpport " . escapeshellarg($port);
 				} elseif ($api == "standalonetls") {
 					$port = empty($envvariables['port']) ? 443 : $envvariables['port'];
-					$listen = ($envvariables['ipv6'] == "yes") ? "--listen-v6" : "--listen-v4";
-					$domainparameters = " --alpn {$listen} --tlsport " . escapeshellarg($port);
+					$domainparameters = " --alpn --tlsport " . escapeshellarg($port);
 				} else {
 					$domainparameters = " --webroot pfSenseacme";
 				}