53 Commits (f74fed3f544651c1870d285011598d4fef5e205b)

Author SHA1 Message Date
Mohammed Al Sahaf f74fed3f54
v2: only compare TLS protocol versions if both are set (#3005) 5 years ago
Matthew Holt 5c99267dd8
A few miscellaneous, minor fixes 5 years ago
Mohammed Al Sahaf dff78d82ce v2: housekeeping: address minor lint complaints (#2957) 5 years ago
Matthew Holt 2b33d9a5e5
http: Enable TLS for servers listening only on HTTPS port 5 years ago
Matt Holt 3c90e370a4
v2: Module documentation; refactor LoadModule(); new caddy struct tags (#2924) 5 years ago
Matt Holt b00dfd3965
v2: Logging! (#2831) 5 years ago
Matthew Holt faf67b1067
tls: Make the on-demand rate limiter actually work 5 years ago
Matthew Holt bce2edd22d
tls: Asynchronous cert management at startup (uses CertMagic v0.8.0) 5 years ago
Matthew Holt 85ce15a5ad
tls: Add custom certificate selection policy 5 years ago
Matthew Holt dedcfd4e3d
tls: Add distributed_stek module 5 years ago
Matthew Holt 20fe9cf024
tls: Add pem_loader module 5 years ago
Matthew Holt f29a9eee0d
caddytls: nil check on storageClean fields on Stop 5 years ago
Matthew Holt b249b45d10
tls: Change struct fields to pointers, add nil checks; rate.Burst update 5 years ago
Matthew Holt 7b33c8db31
tls: Make cert and OCSP check intervals configurable 5 years ago
Matt Holt 11696793bd
tls/acme: Ability to customize trusted roots for ACME servers (#2756) 5 years ago
Matthew Holt 19f36667f7
tls: Clean up expired OCSP staples and certificates 5 years ago
Matthew Holt f15f0d5839
Eliminate some TODOs 5 years ago
Matthew Holt 839507e24e
http: Consider wildcards when evaluating automatic HTTPS 5 years ago
Matthew Holt ed40a5dcab
tls: Do away with SetDefaults which did nothing useful 5 years ago
Matthew Holt 7799554baa
go.mod: Use lego v3 and CertMagic 0.7.0 5 years ago
Matthew Holt 2cb01d43cf
tls: Remove support for TLS 1.0 and TLS 1.1 5 years ago
Matthew Holt b4dce74e59
tls: Use Let's Encrypt production endpoint 5 years ago
Matthew Holt 1ce10b453f
Require Go 1.13; use Go 1.13's default support for TLS 1.3 5 years ago
Alexandre Stein 50961ecc77 Initial implementation of TLS client authentication (#2731) 5 years ago
Matthew Holt c9980fd367
Refactor Caddyfile adapter and module registration 6 years ago
Matthew Holt ab885f07b8
Implement config adapters and beginning of Caddyfile adapter 6 years ago
Matthew Holt 28df6cedfe
tls: Use IANA-standard cipher suite names 6 years ago
Matthew Holt dd6aa91d72
Fix DNS provider module unmarshaling (closes #2676) 6 years ago
Matthew Holt 79216d356c
acmemanager: Use storage module key "module" instead of "system" 6 years ago
Matthew Holt fdd871e177
go.mod: Append /v2 to module name; update all import paths 6 years ago
Matthew Holt 533d1afb4b tls: Enable TLS 1.3 by default; set sane defaults on tls.Config structs 6 years ago
Matthew Holt 3177ee8010 Add license 6 years ago
Matthew Holt 2b22d2e6ea Optionally enforce strict TLS SNI + HTTP Host matching, & misc. cleanup 6 years ago
Matthew Holt 38677aaa58 caddytls: Support tags for manually-loaded certificates 6 years ago
Matthew Holt 81a9e125b5 Oops 6 years ago
Matthew Holt 269b1e9aa3 tls: Improve (and fix) on-demand configuration 6 years ago
Matthew Holt 6706c9225a Implement templates handler; various minor cleanups and bug fixes 6 years ago
Matthew Holt 5137859e47 Rename caddy2 -> caddy 6 years ago
Matthew Holt b79f86f256 Fix bugs related to auto HTTPS and alternate port configurations 6 years ago
Matthew Holt 613aecb898 Change import paths to GitHub package names 6 years ago
Matthew Holt f064889a4f Customize admin endpoint address with -listen flag 6 years ago
Matthew Holt 3439933235 Implement session ticket keys; default STEK module with rotation 6 years ago
Matthew Holt da6a8cfc86 Minor cleanups 6 years ago
Matthew Holt 9cd6f35e9d Separate out certificate selection 6 years ago
Matthew Holt 210d0cf7f1 Implement custom cert selection policies; optimize matching for SNI 6 years ago
Matthew Holt be9b6e7b57 Honor the configured CA value 6 years ago
Matthew Holt 2fd98cb040 Module.New() does not need to return an error 6 years ago
Matthew Holt 1f0c061ce3 Architectural shift to using context for config and module state 6 years ago
Matthew Holt f9d93ead4e Rename and export some types, other minor changes 6 years ago
Matthew Holt 48b5a80320 Remove (unimplemented) enterprise TLS matchers 6 years ago