Method makeClient

modules/caddypki/acmeserver/acmeserver.go:307–353

makeClient creates an ACME client which will use a custom resolver instead of net.DefaultResolver.

()

// makeClient creates an ACME client which will use a custom
// resolver instead of net.DefaultResolver.
func (ash Handler) makeClient() (acme.Client, error) {
	// If no local resolvers are configured, check for global resolvers from TLS app
	resolversToUse := ash.Resolvers
	if len(resolversToUse) == 0 {
		tlsAppIface, err := ash.ctx.App("tls")
		if err == nil {
			tlsApp := tlsAppIface.(*caddytls.TLS)
			if len(tlsApp.Resolvers) > 0 {
				resolversToUse = tlsApp.Resolvers
			}
		}
	}

	for _, v := range resolversToUse {
		addr, err := caddy.ParseNetworkAddressWithDefaults(v, "udp", 53)
		if err != nil {
			return nil, err
		}
		if addr.PortRangeSize() != 1 {
			return nil, fmt.Errorf("resolver address must have exactly one address; cannot call %v", addr)
		}
		ash.resolvers = append(ash.resolvers, addr)
	}

	var resolver *net.Resolver
	if len(ash.resolvers) != 0 {
		dialer := &net.Dialer{
			Timeout: 2 * time.Second,
		}
		resolver = &net.Resolver{
			PreferGo: true,
			Dial: func(ctx context.Context, network, address string) (net.Conn, error) {
				//nolint:gosec
				addr := ash.resolvers[weakrand.IntN(len(ash.resolvers))]
				return dialer.DialContext(ctx, addr.Network, addr.JoinHostPort(0))
			},
		}
	} else {
		resolver = net.DefaultResolver
	}

	return resolverClient{
		Client:   acme.NewClient(),
		resolver: resolver,
		ctx:      ash.ctx,
	}, nil
}

type resolverClient struct {
	acme.Client