Why do you perform domain validation on IP addresses?

[d-e-s-o]

See above. When I try to connect to an IP address I get a complaint about an invalid domain. Other TLS crates seem fine with an IP to connect to. Why is this check in place for IP addresses?

[Demi-Marie]

This is a missing feature in WebPKI.

[sachanganesh]

Just to clarify, is there any work-around to the domain validation? I want to test against a local tls server, but I'm encountering the "invalid domain" error with little additional context.

If someone could provide a solution to the error, a work-around, or resources for further reading that would be greatly appreciated.

Thanks in advance!

[Demi-Marie]

The only workarounds are:

• Implement it oneself with a custom certificate verifier.
• Implement it oneself and get it upstreamed to WebPKI.
• Pay Brian Smith to add support for it to WebPKI.