roster-server 2.1.18 → 2.1.22

package/index.js

@@ -775,6 +775,19 @@ class Roster {
                 }
             }
 
+            const isBunRuntime = typeof Bun !== 'undefined' || process.release?.name === 'bun';
+            if (isBunRuntime && this.wildcardZones.size > 0) {
+                for (const zone of this.wildcardZones) {
+                    const bootstrapHost = `bun-bootstrap.${zone}`;
+                    try {
+                        log.warn(`⚠️  Bun runtime detected: prewarming wildcard certificate via ${bootstrapHost}`);
+                        await greenlockRuntime.get({ servername: bootstrapHost });
+                    } catch (error) {
+                        log.warn(`⚠️  Bun wildcard prewarm failed for ${zone}: ${error?.message || error}`);
+                    }
+                }
+            }
+
             // Create dispatcher for each port
             const createDispatcher = (portData) => {
                 return (req, res) => {
@@ -923,7 +936,6 @@ class Roster {
                 if (portNum === this.defaultPort) {
                     // Bun has known gaps around SNICallback compatibility.
                     // Fallback to static cert loading for the primary domain on default HTTPS port.
-                    const isBunRuntime = typeof Bun !== 'undefined' || process.release?.name === 'bun';
                     const tlsOpts = { minVersion: this.tlsMinVersion, maxVersion: this.tlsMaxVersion };
                     let httpsServer;
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "roster-server",
-    "version": "2.1.18",
+    "version": "2.1.22",
     "description": "👾 RosterServer - A domain host router to host multiple HTTPS.",
     "main": "index.js",
     "scripts": {

package/vendor/acme-dns-01-cli-wrapper.js

@@ -66,6 +66,7 @@ module.exports.create = function create(config = {}) {
     }
 
     const presentedByHost = new Map();
+    const presentedByAltname = new Map();
 
     async function setChallenge(opts) {
         const isInteractive = Boolean(process.stdin && process.stdin.isTTY);
@@ -83,6 +84,10 @@ module.exports.create = function create(config = {}) {
         if (dnsHost && dnsAuth) {
             presentedByHost.set(dnsHost, dnsAuth);
         }
+        const altname = String(ch.altname || opts?.altname || '');
+        if (altname && dnsAuth) {
+            presentedByAltname.set(altname, { dnsHost, dnsAuthorization: dnsAuth });
+        }
         const isDryRunChallenge = dnsHost.includes('_greenlock-dryrun-');
         const effectiveDelay = isDryRunChallenge
             ? Math.max(0, dryRunDelay)
@@ -108,11 +113,18 @@ module.exports.create = function create(config = {}) {
 
     async function getChallenge(opts) {
         const ch = opts?.challenge || {};
-        const dnsHost = String(ch.dnsHost || opts?.dnsHost || '');
+        const altname = String(ch.altname || opts?.altname || '');
+        const wildcardZone = altname.startsWith('*.') ? altname.slice(2) : '';
+        const dnsHostFromAltname = wildcardZone ? `_acme-challenge.${wildcardZone}` : '';
+        const dnsHost = String(ch.dnsHost || opts?.dnsHost || dnsHostFromAltname || '');
+
+        const byAltname = altname ? presentedByAltname.get(altname) : null;
         const dnsAuthorization =
             ch.dnsAuthorization ||
             opts?.dnsAuthorization ||
-            (dnsHost ? presentedByHost.get(dnsHost) : null);
+            (dnsHost ? presentedByHost.get(dnsHost) : null) ||
+            byAltname?.dnsAuthorization ||
+            null;
 
         if (!dnsAuthorization) {
             return null;
@@ -120,6 +132,8 @@ module.exports.create = function create(config = {}) {
 
         return {
             ...(typeof ch === 'object' ? ch : {}),
+            ...(altname ? { altname } : {}),
+            ...(dnsHost ? { dnsHost } : {}),
             dnsAuthorization
         };
     }