Hurricane Electric's IPv6 Tunnel Broker Forums

DNS.HE.NET Topics => General Questions & Suggestions => Topic started by: gtxaspec on April 01, 2023, 12:16:31 AM

Title: ordns.he.net certificate validation fails due to missing IPs in certificate.
Post by: gtxaspec on April 01, 2023, 12:16:31 AM
root@test:~$ dnslookup 'example.com' 'https://[2001:470:20::2]'
dnslookup v. 1.8.1-8619
2023/04/01 00:09:52 [fatal] Cannot make the DNS request: requesting https://[2001:470:20::2]:443: Get "https://[2001:470:20::2]:443?dns=AAABAAABAAAAAAAAB2V4YW1wbGUDY29tAAABAAE": x509: cannot validate certificate for 2001:470:20::2 because it doesn't contain any IP SANs

Checking the certificate in a browser also fails because of the certificate issue.  Is this the right area to report this for the public recursor not working properly?