Browse Source
reverseproxy: Add Caddyfile support for ClientCertificateAutomate
master
Matthew Holt
5 years ago
No known key found for this signature in database
GPG Key ID: 2A349DD577D586A5
1 changed files with
10 additions and
8 deletions
-
modules/caddyhttp/reverseproxy/caddyfile.go
|
|
@ -619,15 +619,19 @@ func (h *HTTPTransport) UnmarshalCaddyfile(d *caddyfile.Dispenser) error { |
|
|
|
h.DialTimeout = caddy.Duration(dur) |
|
|
|
|
|
|
|
case "tls_client_auth": |
|
|
|
args := d.RemainingArgs() |
|
|
|
if len(args) != 2 { |
|
|
|
return d.ArgErr() |
|
|
|
} |
|
|
|
if h.TLS == nil { |
|
|
|
h.TLS = new(TLSConfig) |
|
|
|
} |
|
|
|
h.TLS.ClientCertificateFile = args[0] |
|
|
|
h.TLS.ClientCertificateKeyFile = args[1] |
|
|
|
args := d.RemainingArgs() |
|
|
|
switch len(args) { |
|
|
|
case 1: |
|
|
|
h.TLS.ClientCertificateAutomate = args[0] |
|
|
|
case 2: |
|
|
|
h.TLS.ClientCertificateFile = args[0] |
|
|
|
h.TLS.ClientCertificateKeyFile = args[1] |
|
|
|
default: |
|
|
|
return d.ArgErr() |
|
|
|
} |
|
|
|
|
|
|
|
case "tls": |
|
|
|
if h.TLS == nil { |
|
|
@ -664,7 +668,6 @@ func (h *HTTPTransport) UnmarshalCaddyfile(d *caddyfile.Dispenser) error { |
|
|
|
if h.TLS == nil { |
|
|
|
h.TLS = new(TLSConfig) |
|
|
|
} |
|
|
|
|
|
|
|
h.TLS.RootCAPEMFiles = args |
|
|
|
|
|
|
|
case "tls_server_name": |
|
|
@ -674,7 +677,6 @@ func (h *HTTPTransport) UnmarshalCaddyfile(d *caddyfile.Dispenser) error { |
|
|
|
if h.TLS == nil { |
|
|
|
h.TLS = new(TLSConfig) |
|
|
|
} |
|
|
|
|
|
|
|
h.TLS.ServerName = d.Val() |
|
|
|
|
|
|
|
case "keepalive": |
|
|
|