mirror of
https://github.com/caddyserver/caddy.git
synced 2025-01-28 04:45:56 +03:00
caddyhttp: Return HTTP 421 for mismatched Host header (#4023)
Potential fix for #4017 although the consensus is unclear. Made change to return status code 421 instead of 403 when StrictSNIHost matching is on.
This commit is contained in:
parent
af1ac9cd2e
commit
850e1605df
1 changed files with 1 additions and 1 deletions
|
@ -302,7 +302,7 @@ func (s *Server) enforcementHandler(w http.ResponseWriter, r *http.Request, next
|
||||||
err := fmt.Errorf("strict host matching: TLS ServerName (%s) and HTTP Host (%s) values differ",
|
err := fmt.Errorf("strict host matching: TLS ServerName (%s) and HTTP Host (%s) values differ",
|
||||||
r.TLS.ServerName, hostname)
|
r.TLS.ServerName, hostname)
|
||||||
r.Close = true
|
r.Close = true
|
||||||
return Error(http.StatusForbidden, err)
|
return Error(http.StatusMisdirectedRequest, err)
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
return next.ServeHTTP(w, r)
|
return next.ServeHTTP(w, r)
|
||||||
|
|
Loading…
Reference in a new issue