3 people d42128d71d fix: preserve SNI for local internal API (#39412) ...

https://github.com/go-gitea/gitea/pull/38406 stopped setting
`ServerName` on the internal API client, which
https://github.com/go-gitea/gitea/pull/5820 had added for ACME. Internal
requests to a local `LOCAL_ROOT_URL` now send SNI `localhost` (or none
for IPs). The ACME listener selects its certificate by SNI, finds none
and aborts the handshake with `tls: internal error`, breaking SSH access
and git hooks.

Send the `ROOT_URL` host as SNI again for local targets, and treat
unspecified addresses (`0.0.0.0`, `::`) as local since dialing them
reaches the local host. Remote targets are still verified against their
own hostname.

Fixes: https://github.com/go-gitea/gitea/issues/38903

---------

Co-authored-by: silverwind <me@silverwind.io>

2026-09-25 13:46:52 +00:00

..

actions.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

hook.go

fix: add default timeout and handle errors for HaveIBeenPwned API (#39316)

2026-09-16 20:41:57 +02:00

internal_test.go

fix: preserve SNI for local internal API (#39412)

2026-09-25 13:46:52 +00:00

internal.go

fix: preserve SNI for local internal API (#39412)

2026-09-25 13:46:52 +00:00

key.go

fix(ssh): fetch ssh key by fingerprint (#39423)

2026-09-25 06:22:04 -07:00

mail.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

manager.go

refactor: http request binding (#38971)

2026-08-19 14:15:42 +08:00

pushoptions_test.go

…

pushoptions.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

request.go

fix: add default timeout and handle errors for HaveIBeenPwned API (#39316)

2026-09-16 20:41:57 +02:00

restore_repo.go

chore: Move import path from code.gitea.io/gitea to gitea.dev (#37873)

2026-05-26 15:49:31 -07:00

serv.go

feat: add deploy tokens (#37306)

2026-08-26 19:32:44 +00:00