Fix HTTP01 challenge url when --acme-http-host is used

This commit fixes an issue when the http-01 challenge url didn't had the insecure port.
smallstep · Jul 9, 2024 · f3a81b8 · f3a81b8
1 parent 0eee6f0
commit f3a81b8
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/acme/challenge.go b/acme/challenge.go
@@ -117,7 +117,9 @@ func http01Validate(ctx context.Context, ch *Challenge, db DB, jwk *jose.JSONWeb
 	// Append insecure port if set.
 	// Only used for testing purposes.
 	if InsecurePortHTTP01 != 0 {
-		u.Host += ":" + strconv.Itoa(InsecurePortHTTP01)
+		insecurePort := strconv.Itoa(InsecurePortHTTP01)
+		u.Host += ":" + insecurePort
+		challengeURL.Host += ":" + insecurePort
 	}
 
 	vc := MustClientFromContext(ctx)