Skip to content

Conversation

@gmaiztegi
Copy link
Contributor

When trying to validate the hostnames prior to the certificate generation process, it will fail if the IPv6 address is set for those hostnames and the server uses the protocol. This should fix this behavior.

When trying to validate the hostnames prior to the certificate generation process, it will fail if the IPv6 address is set for those hostnames and the server uses the protocol. This small fix should make this work.
@fullyint
Copy link
Contributor

Looks good to me.


IPv6-related notes from #885:

Testing IPv6

Of course, to test IPv6, one's local machine and server must both enable IPv6. For Trellis to make IPv6 SSH connections (e.g., to run a playbook), adjust the ListenAdresses and AddressFamily:

 sshd_listen_addresses:
   - 0.0.0.0
+  - '::'

-sshd_address_family: inet
+sshd_address_family: any

⚠️ Trellis is not ready for IPv6 in production. There are no ip6tables settings.

@swalkinshaw swalkinshaw merged commit 75bcadf into roots:master Jan 21, 2018
@swalkinshaw
Copy link
Member

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants