]> git.ipfire.org Git - thirdparty/squid.git/commit
Assume [] surround an IPv6 address and strip them BumpSslServerFirst.take08
authorAlex Rousskov <rousskov@measurement-factory.com>
Sat, 2 Jun 2012 00:21:53 +0000 (18:21 -0600)
committerAlex Rousskov <rousskov@measurement-factory.com>
Sat, 2 Jun 2012 00:21:53 +0000 (18:21 -0600)
commit4a962df3f11e771d248e0ded367f9c05d82286f8
treee5833328d2129688b74910c84874982b8a71ec54
parentdcb1e4bbf8c0f051401d00ac7b6bc671c4274e3d
Assume [] surround an IPv6 address and strip them

Browsers such as Firefox, Chromium, and Safari prefer bare IPv6 addresses in
CNs. They generate confusing errors when they see bracketed CNs. For example:

You attempted to reach [2001:470:1:18::120], but instead you actually reached
a server identifying itself as [2001:470:1:18::120]. Chromium can say for sure
that you reached [2001:470:1:18::120], but cannot verify that that is the same
site as [2001:470:1:18::120] which you intended to reach.
src/ssl/gadgets.cc