tsnet: add CertDomains helper (#7533)

Signed-off-by: Maisem Ali <maisem@tailscale.com>
2 years ago · 958c89470b
parent e109cf9fdd
commit 958c89470b
2 changed files with 18 additions and 0 deletions
--- a/tsnet/example/tsnet-funnel/tsnet-funnel.go
+++ b/tsnet/example/tsnet-funnel/tsnet-funnel.go
@ -34,6 +34,8 @@ func main() {
 	}
 	defer ln.Close()

+	fmt.Printf("Listening on https://%v\n", s.CertDomains()[0])
+
 	err = http.Serve(ln, http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		fmt.Fprintln(w, "<html><body><h1>Hello, internet!</h1>")
 	}))
--- a/tsnet/tsnet.go
+++ b/tsnet/tsnet.go
@ -26,6 +26,7 @@ import (
 	"sync"
 	"time"

+	"golang.org/x/exp/slices"
 	"tailscale.com/client/tailscale"
 	"tailscale.com/control/controlclient"
 	"tailscale.com/envknob"
@ -366,11 +367,26 @@ func (s *Server) doInit() {
 	}
 }

+// CertDomains returns the list of domains for which the server can
+// provide TLS certificates. These are also the DNS names for the
+// Server.
+// If the server is not running, it returns nil.
+func (s *Server) CertDomains() []string {
+	nm := s.lb.NetMap()
+	if nm == nil {
+		return nil
+	}
+	return slices.Clone(nm.DNS.CertDomains)
+}
+
 // TailscaleIPs returns IPv4 and IPv6 addresses for this node. If the node
 // has not yet joined a tailnet or is otherwise unaware of its own IP addresses,
 // the returned ip4, ip6 will be !netip.IsValid().
 func (s *Server) TailscaleIPs() (ip4, ip6 netip.Addr) {
 	nm := s.lb.NetMap()
+	if nm == nil {
+		return
+	}
 	for _, addr := range nm.Addresses {
 		ip := addr.Addr()
 		if ip.Is6() {