Validate HOST before generating the self-signed certificate in setup-ssl.sh

[kmcginnes]

setup-ssl.sh writes the HOST environment variable straight into a sed substitution when it builds the certificate config, and doesn't check the value first (setup-ssl.sh:18-19):

sed -i'' -e "s/^DNS\.1 = .*/DNS.1 = $HOST:*/" "$CERT_DIR/csr.conf"
sed -i'' -e "s/^DNS\.1 = .*/DNS.1 = $HOST:*/" "$CERT_DIR/cert.conf"

HOST should be a hostname or IP address. Only the person running the container can set it, but nothing stops an unexpected value from producing a broken certificate or unexpected script behavior.

Proposal

Check HOST against a hostname-safe character set (letters, digits, hyphens, dots) before it reaches the sed calls. When it doesn't match, fail with a clear message that names HOST.

Related issues

• Related to TypeScript SSL certificate generation #1672. If that lands first, put this validation in the new TypeScript code instead.

Important

Internal only — this issue is maintained by the core team and is not accepting external contributions.