Skip to content

Conversation

@flub
Copy link
Contributor

@flub flub commented Nov 7, 2025

Description

It is really up to the user. Forcing this was always a choice that
made me slightly uncomfortable. Some weird places might need relative
URLs. Or places that need to be able to use this same URL using
OpenSSL, which has a bug handling certificates that do not have the
absolute DNS name.

The important part is that our defaults still use an absolute DNS
name. And we also strongly encourage it.

Breaking Changes

None

Notes & open questions

Fixes #3612, obsoletes #3487.

Change checklist

  • Self-review.
  • Documentation updates following the style guide, if relevant.
  • Tests if relevant.
  • All breaking changes documented.

It is really up to the user.  Forcing this was always a choice that
made me slightly uncomfortable.  Some weird places might need relative
URLs.  Or places that need to be able to use this same URL using
OpenSSL, which has a bug handling certificates that do not have the
absolute DNS name.

The important part is that our defaults still use an absolute DNS
name.  And we also strongly encourage it.

Fixes #3612
@github-actions
Copy link

github-actions bot commented Nov 7, 2025

Documentation for this PR has been generated and is available at: https://n0-computer.github.io/iroh/pr/3623/docs/iroh/

Last updated: 2025-11-07T16:48:12Z

@github-actions
Copy link

github-actions bot commented Nov 7, 2025

Netsim report & logs for this PR have been generated and is available at: LOGS
This report will remain available for 3 days.

Last updated for commit: f9c08c2

@n0bot n0bot bot added this to iroh Nov 7, 2025
@github-project-automation github-project-automation bot moved this to 🏗 In progress in iroh Nov 7, 2025
Copy link
Contributor

@dignifiedquire dignifiedquire left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this makes sense, if folks want to use this they can, but we shouldn't force them

@ramfox ramfox added this to the v0.96 milestone Nov 7, 2025
@dignifiedquire dignifiedquire added this pull request to the merge queue Nov 8, 2025
Merged via the queue into main with commit 9bae228 Nov 8, 2025
29 checks passed
@github-project-automation github-project-automation bot moved this from 🏗 In progress to ✅ Done in iroh Nov 8, 2025
@flub flub deleted the flub/no-force-dns-root branch November 10, 2025 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: ✅ Done

Development

Successfully merging this pull request may close these issues.

bug: The CN name of the certificate does not match the value transmitted.

5 participants