Fall back to plain HTTP if a Let's Encrypt email is not provided. Maybe self-signed TLS is... marginally better?

This commit is contained in:
eyedeekay
2025-04-18 17:35:50 -04:00
parent cbd126ff4d
commit d9fc6472db

View File

@ -59,18 +59,29 @@ func Listen(name string, addr string, certdir string, hiddenTls bool) (net.Liste
if err != nil {
return nil, err
}
cfg := wileedot.Config{
Domain: name,
AllowedDomains: []string{name},
CertDir: certdir,
Email: addr,
}
tlsListener, err := wileedot.New(cfg)
if err != nil {
return nil, err
}
if err := ml.AddListener("tls", tlsListener); err != nil {
return nil, err
if addr != "" {
cfg := wileedot.Config{
Domain: name,
AllowedDomains: []string{name},
CertDir: certdir,
Email: addr,
}
tlsListener, err := wileedot.New(cfg)
if err != nil {
return nil, err
}
if err := ml.AddListener("tls", tlsListener); err != nil {
return nil, err
}
} else {
// Listen on plain HTTP
tlsListener, err := net.Listen("tcp", ":80")
if err != nil {
return nil, err
}
if err := ml.AddListener("http", tlsListener); err != nil {
return nil, err
}
}
if hiddenTls {
onionListener, err := ml.Onion.ListenTLS()