From e4fa881601597252684dcc0c4051c4f10691c5a8 Mon Sep 17 00:00:00 2001 From: Matthew Wild Date: Thu, 3 Apr 2025 12:02:45 +0100 Subject: portmanager: Take automatic cert selection into account when setting SNI cert This fixes (another) issue with the fix in 4ea7bd7325be, where it no longer checked the automatic cert index for an appropriate certificate. --- core/portmanager.lua | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/core/portmanager.lua b/core/portmanager.lua index e1dde176..2a090398 100644 --- a/core/portmanager.lua +++ b/core/portmanager.lua @@ -253,7 +253,8 @@ local function add_sni_host(host, service) -- TODO should this be some generic thing? e.g. in the service definition alternate_host = config.get(host, "http_host"); end - local ssl, err, cfg = certmanager.create_context(alternate_host or host, "server", prefix_ssl_config, active_service.tls_cfg); + local autocert = certmanager.find_host_cert(alternate_host or host); + local ssl, err, cfg = certmanager.create_context(alternate_host or host, "server", prefix_ssl_config, autocert, active_service.tls_cfg); if not ssl then log("error", "Error creating TLS context for SNI host %s: %s", host, err); else -- cgit v1.2.3