Don't process HSTS/HPKP headers when host is an IP address

net/data/ssl/scripts/generate-policy-certs.sh

 #!/bin/sh
 
 # Copyright 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 # This script generates a (end-entity, intermediate, root) certificate, where
 # the root has no explicit policies associated, the intermediate has multiple
 # policies, and the leaf has a single policy.
 #
 # When validating, supplying no policy OID should not result in an error.
 
 try() {
-  echo "$@"
-  "$@" || exit 1
+  "$@" || (e=$?; echo "$@" > /dev/stderr; exit $e)
 }
 
 try rm -rf out
 try mkdir out
 
 # Create the serial number files.
 try /bin/sh -c "echo 01 > out/policy-root-serial"
 try /bin/sh -c "echo 01 > out/policy-intermediate-serial"
 
 # Create the signers' DB files.
@@ skipping 62 matching lines @@
   try openssl ca \
     -batch \
     -in out/policy-cert.csr \
     -out out/policy-cert.pem \
     -config policy.cnf \
     -extensions user_cert
 
 try /bin/sh -c "cat out/policy-cert.pem \
     out/policy-intermediate.pem \
     out/policy-root.pem >../certificates/explicit-policy-chain.pem"