Use HTTPS for checkip{6,4}.dns.lightningwirelabs.com

Since we are deploying a HSTS policy for lightningwirelabs.com now,
and we generally only use HTTPS for everything, this patch changes
this for the IP address discovery process, too.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
Signed-off-by: Stefan Schantl <stefan.schantl@ipfire.org>

diff --git a/src/ddns/system.py b/src/ddns/system.py
index 67ea553b434bdcb7c96989328ea56422fe711973..b7a51f6fcb84251b04a519b66d96ab4148c761e8 100644 (file)
--- a/src/ddns/system.py
+++ b/src/ddns/system.py
@@ -112,9 +112,9 @@ class DDNSSystem(object):
 
        def guess_external_ip_address(self, family, **kwargs):
                if family == "ipv6":
-                       url = "http://checkip6.dns.lightningwirelabs.com"
+                       url = "https://checkip6.dns.lightningwirelabs.com"
                elif family == "ipv4":
-                       url = "http://checkip4.dns.lightningwirelabs.com"
+                       url = "https://checkip4.dns.lightningwirelabs.com"
                else:
                        raise ValueError("unknown address family")