Gitea

mirror of https://github.com/go-gitea/gitea.git synced 2026-09-26 22:18:38 +00:00

Files

T

bircni d42128d71d fix: preserve SNI for local internal API (#39412 )

https://github.com/go-gitea/gitea/pull/38406 stopped setting
`ServerName` on the internal API client, which
https://github.com/go-gitea/gitea/pull/5820 had added for ACME. Internal
requests to a local `LOCAL_ROOT_URL` now send SNI `localhost` (or none
for IPs). The ACME listener selects its certificate by SNI, finds none
and aborts the handshake with `tls: internal error`, breaking SSH access
and git hooks.

Send the `ROOT_URL` host as SNI again for local targets, and treat
unspecified addresses (`0.0.0.0`, `::`) as local since dialing them
reaches the local host. Remote targets are still verified against their
own hostname.

Fixes: https://github.com/go-gitea/gitea/issues/38903

---------

Co-authored-by: silverwind <me@silverwind.io>

2026-09-25 13:46:52 +00:00

actions.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873 )

2026-05-26 15:49:31 -07:00

hook.go

fix: add default timeout and handle errors for HaveIBeenPwned API (#39316 )

2026-09-16 20:41:57 +02:00

internal_test.go

fix: preserve SNI for local internal API (#39412 )

2026-09-25 13:46:52 +00:00

internal.go

fix: preserve SNI for local internal API (#39412 )