mirror of
https://github.com/awatertrevi/infisical.git
synced 2026-10-08 04:27:38 +00:00
misc: allowed dns for host value in relay
This commit is contained in:
@@ -1,3 +1,5 @@
|
|||||||
|
import { isIP } from "node:net";
|
||||||
|
|
||||||
import { ForbiddenError } from "@casl/ability";
|
import { ForbiddenError } from "@casl/ability";
|
||||||
import * as x509 from "@peculiar/x509";
|
import * as x509 from "@peculiar/x509";
|
||||||
|
|
||||||
@@ -649,8 +651,9 @@ export const relayServiceFactory = ({
|
|||||||
true
|
true
|
||||||
),
|
),
|
||||||
new x509.ExtendedKeyUsageExtension([x509.ExtendedKeyUsage[CertExtendedKeyUsage.SERVER_AUTH]], true),
|
new x509.ExtendedKeyUsageExtension([x509.ExtendedKeyUsage[CertExtendedKeyUsage.SERVER_AUTH]], true),
|
||||||
|
|
||||||
// san
|
// san
|
||||||
new x509.SubjectAlternativeNameExtension([{ type: "ip", value: host }], false)
|
new x509.SubjectAlternativeNameExtension([{ type: isIP(host) ? "ip" : "dns", value: host }], false)
|
||||||
];
|
];
|
||||||
|
|
||||||
const relayServerSerialNumber = createSerialNumber();
|
const relayServerSerialNumber = createSerialNumber();
|
||||||
|
|||||||
Reference in New Issue
Block a user