From 2ecfb23dda8ec8edccc64a179bab8dd1f1c8157b Mon Sep 17 00:00:00 2001 From: FlyveHest Date: Thu, 11 Jul 2019 21:57:31 +0200 Subject: [PATCH] Do not perform local ip check when you have an IP specified already Use local address when setting up ALPN server, if specified --- acme.sh | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/acme.sh b/acme.sh index 67fcdcb5..4880aba3 100755 --- a/acme.sh +++ b/acme.sh @@ -3182,7 +3182,10 @@ _on_before_issue() { _netprc="$(_ss "$_checkport" | grep "$_checkport")" netprc="$(echo "$_netprc" | grep "$_checkaddr")" if [ -z "$netprc" ]; then - netprc="$(echo "$_netprc" | grep "$LOCAL_ANY_ADDRESS")" + # Only check for local bindings when you aren't looking for a specific IP + if [ -z "$_checkaddr" ]; then + netprc="$(echo "$_netprc" | grep "$LOCAL_ANY_ADDRESS")" + fi fi if [ "$netprc" ]; then _err "$netprc" @@ -4247,6 +4250,7 @@ $_authorizations_map" fi elif [ "$vtype" = "$VTYPE_ALPN" ]; then + _ncaddr="$(_getfield "$_local_addr" "$_ncIndex")" acmevalidationv1="$(printf "%s" "$keyauthorization" | _digest "sha256" "hex")" _debug acmevalidationv1 "$acmevalidationv1" if ! _starttlsserver "$d" "" "$Le_TLSPort" "$keyauthorization" "$_ncaddr" "$acmevalidationv1"; then