From 920bce0fe5c6a06c61cd579a719f5ed032f78915 Mon Sep 17 00:00:00 2001
From: Brad Fitzpatrick <bradfitz@tailscale.com>
Date: Sat, 20 Sep 2025 16:48:18 -0700
Subject: [PATCH] WIP

Change-Id: I4eb57f046d8b40403220e40eb67a31c41adb3a38
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
---
 control/controlhttp/client.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/control/controlhttp/client.go b/control/controlhttp/client.go
index 87061c310..d4c6dd79c 100644
--- a/control/controlhttp/client.go
+++ b/control/controlhttp/client.go
@@ -422,6 +422,10 @@ func (a *Dialer) dialHostOpt(ctx context.Context, optAddr netip.Addr, optACEHost
 					go try(u443)
 				} // else we lost the race and it started already which is what we want
 			case u443:
+				if u80 == nil {
+					// We never started a port 80 dial, so just return the port 443 error.
+					return nil, res.err
+				}
 				err443 = res.err
 			default:
 				panic("invalid")