Use HTTPS for checkip{6,4}.dns.lightningwirelabs.com
authorMichael Tremer <michael.tremer@ipfire.org>
Tue, 8 Oct 2019 08:37:06 +0000 (08:37 +0000)
committerStefan Schantl <stefan.schantl@ipfire.org>
Thu, 17 Oct 2019 17:58:45 +0000 (19:58 +0200)
Since we are deploying a HSTS policy for lightningwirelabs.com now,
and we generally only use HTTPS for everything, this patch changes
this for the IP address discovery process, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>
src/ddns/system.py

index 67ea553..b7a51f6 100644 (file)
@@ -112,9 +112,9 @@ class DDNSSystem(object):
 
        def guess_external_ip_address(self, family, **kwargs):
                if family == "ipv6":
-                       url = "http://checkip6.dns.lightningwirelabs.com"
+                       url = "https://checkip6.dns.lightningwirelabs.com"
                elif family == "ipv4":
-                       url = "http://checkip4.dns.lightningwirelabs.com"
+                       url = "https://checkip4.dns.lightningwirelabs.com"
                else:
                        raise ValueError("unknown address family")