Matthew Holt
ab885f07b8
Implement config adapters and beginning of Caddyfile adapter
Along with several other changes, such as renaming caddyhttp.ServerRoute
to caddyhttp.Route, exporting some types that were not exported before,
and tweaking the caddytls TLS values to be more consistent.
Notably, we also now disable automatic cert management for names which
already have a cert (manually) loaded into the cache. These names no
longer need to be specified in the "skip_certificates" field of the
automatic HTTPS config, because they will be skipped automatically.
6 years ago
Matthew Holt
28df6cedfe
tls: Use IANA-standard cipher suite names
6 years ago
Matthew Holt
dd6aa91d72
Fix DNS provider module unmarshaling ( closes #2676 )
6 years ago
Matthew Holt
79216d356c
acmemanager: Use storage module key "module" instead of "system"
6 years ago
Matthew Holt
fdd871e177
go.mod: Append /v2 to module name; update all import paths
See https://github.com/golang/go/wiki/Modules#semantic-import-versioning
6 years ago
Matthew Holt
533d1afb4b
tls: Enable TLS 1.3 by default; set sane defaults on tls.Config structs
6 years ago
Matthew Holt
3177ee8010
Add license
6 years ago
Matthew Holt
2b22d2e6ea
Optionally enforce strict TLS SNI + HTTP Host matching, & misc. cleanup
We should look into a way to enable this by default when TLS client auth
is configured for a server
6 years ago
Matthew Holt
38677aaa58
caddytls: Support tags for manually-loaded certificates
6 years ago
Matthew Holt
81a9e125b5
Oops
6 years ago
Matthew Holt
269b1e9aa3
tls: Improve (and fix) on-demand configuration
6 years ago
Matthew Holt
6706c9225a
Implement templates handler; various minor cleanups and bug fixes
6 years ago
Matthew Holt
5137859e47
Rename caddy2 -> caddy
Removes the version from the package name
6 years ago
Matthew Holt
b79f86f256
Fix bugs related to auto HTTPS and alternate port configurations
6 years ago
Matthew Holt
613aecb898
Change import paths to GitHub package names
6 years ago
Matthew Holt
f064889a4f
Customize admin endpoint address with -listen flag
This is a temporary holdover for development purposes
6 years ago
Matthew Holt
3439933235
Implement session ticket keys; default STEK module with rotation
6 years ago
Matthew Holt
da6a8cfc86
Minor cleanups
6 years ago
Matthew Holt
9cd6f35e9d
Separate out certificate selection
6 years ago
Matthew Holt
210d0cf7f1
Implement custom cert selection policies; optimize matching for SNI
6 years ago
Matthew Holt
be9b6e7b57
Honor the configured CA value
6 years ago
Matthew Holt
2fd98cb040
Module.New() does not need to return an error
6 years ago
Matthew Holt
1f0c061ce3
Architectural shift to using context for config and module state
6 years ago
Matthew Holt
f9d93ead4e
Rename and export some types, other minor changes
6 years ago
Matthew Holt
48b5a80320
Remove (unimplemented) enterprise TLS matchers
6 years ago
Matthew Holt
5859cd8dad
Instantiate apps that are needed but not explicitly configured
6 years ago
Matthew Holt
43961b542b
General cleanup and more godocs
6 years ago
Matthew Holt
2d056fbe66
Initial commit of Storage, TLS, and automatic HTTPS implementations
6 years ago