From f9b5fd5e7fb8178d1269792bc8882c2a78148d4c Mon Sep 17 00:00:00 2001 From: "antanst (aider)" Date: Wed, 23 Oct 2024 12:46:03 +0300 Subject: [PATCH] fix: Use parsedUrl.Hostname() for TLS SNI --- gemini/network.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gemini/network.go b/gemini/network.go index cba2e6c..b14bcba 100644 --- a/gemini/network.go +++ b/gemini/network.go @@ -80,8 +80,8 @@ func ConnectAndGetData(url string) ([]byte, error) { // Perform the TLS handshake tlsConfig := &tls.Config{ - InsecureSkipVerify: true, // Accept all TLS certs, even if insecure. - ServerName: parsedUrl.Host, // SNI + InsecureSkipVerify: true, // Accept all TLS certs, even if insecure. + ServerName: parsedUrl.Hostname(), // SNI should not include port // MinVersion: tls.VersionTLS12, // Use a minimum TLS version. Warning breaks a lot of sites. } tlsConn := tls.Client(conn, tlsConfig)