WordCamp IPv6 not using LE SSL certs.

This is causing old links to WordCamps to be inaccessible.

Looks like it needs the IPv6 listeners added in dehydrated-wc-certs.sh.

$ curl -Isv https://2019.atlanta.wordcamp.org/ -6 2>&1 | grep -E '(Connected|subject)'
&#042; Connected to 2019.atlanta.wordcamp.org (2607:f978:5:8002::c68f:a46a) port 443 (#0)
&#042;  subject: CN=wordcamp.org
&#042;  subjectAltName does not match 2019.atlanta.wordcamp.org
&#042; SSL: no alternative certificate subject name matches target host name '2019.atlanta.wordcamp.org'

verses:

$ curl -Isv https://2019.atlanta.wordcamp.org/ -4 2>&1 | grep -E '(Connected|subject)'
&#042; Connected to 2019.atlanta.wordcamp.org (198.143.164.106) port 443 (#0)
&#042;  subject: CN=atlanta.wordcamp.org
&#042;  subjectAltName: host "2019.atlanta.wordcamp.org" matched cert's "2019.atlanta.wordcamp.org"

Props @desrosj for the notification

#prio1 #wordcamp #ipv6

# curl -6 https://2006.sf.wordcamp.org -Iv * Trying [2607:f978:5:8002::c68f:a46a]:443... * Connected to 2006.sf.wordcamp.org (2607:f978:5:8002::c68f:a46a) port 443 (#0) * ALPN: offers h2,http/1.1 * TLSv1.3 (OUT), TLS handshake, Client hello (1): * CAfile: /etc/ssl/certs/ca-certificates.crt * CApath: /etc/ssl/certs * TLSv1.3 (IN), TLS handshake, Server hello (2): * TLSv1.3 (IN), TLS handshake, Encrypted Extensions (8): * TLSv1.3 (IN), TLS handshake, Certificate (11): * TLSv1.3 (IN), TLS handshake, CERT verify (15): * TLSv1.3 (IN), TLS handshake, Finished (20): * TLSv1.3 (OUT), TLS change cipher, Change cipher spec (1): * TLSv1.3 (OUT), TLS handshake, Finished (20): * SSL connection using TLSv1.3 / TLS_AES_256_GCM_SHA384 * ALPN: server accepted h2 * Server certificate: * subject: CN=sf.wordcamp.org * start date: Oct 7 19:44:33 2025 GMT * expire date: Jan 5 19:44:32 2026 GMT * subjectAltName: host "2006.sf.wordcamp.org" matched cert's "2006.sf.wordcamp.org" * issuer: C=US; O=Let's Encrypt; CN=E7 * SSL certificate verify ok. * using HTTP/2 * h2h3 [:method: HEAD] * h2h3 [:path: /] * h2h3 [:scheme: https] * h2h3 [:authority: 2006.sf.wordcamp.org] * h2h3 [user-agent: curl/7.88.1] * h2h3 [accept: */*] * Using Stream ID: 1 (easy handle 0x55c773ea47a0) > HEAD / HTTP/2 > Host: 2006.sf.wordcamp.org > user-agent: curl/7.88.1 > accept: */* > * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): * TLSv1.3 (IN), TLS handshake, Newsession Ticket (4): * old SSL session ID is stale, removing < HTTP/2 301 HTTP/2 301 < server: nginx server: nginx < date: Thu, 13 Nov 2025 04:00:17 GMT date: Thu, 13 Nov 2025 04:00:17 GMT < content-type: text/html; charset=utf-8 content-type: text/html; charset=utf-8 < location: https://sf.wordcamp.org/2006/ location: https://sf.wordcamp.org/2006/ < alt-svc: h3=":443"; ma=86400 alt-svc: h3=":443"; ma=86400 < strict-transport-security: max-age=31536000 strict-transport-security: max-age=31536000 < * Connection #0 to host 2006.sf.wordcamp.org left intact

Site resources