caddy/caddyconfig/httpcaddyfile
Ran Chen d9b1d46325
caddytls: dns_challenge_override_domain for challenge delegation (#4596)
* Add a override_domain option to allow DNS chanllenge delegation

CNAME can be used to delegate answering the chanllenge to another DNS
zone. One usage is to reduce the exposure of the DNS credential [1].
Based on the discussion in caddy/certmagic#160, we are adding an option
to allow the user explicitly specify the domain to delegate, instead of
following the CNAME chain.

This needs caddy/certmagic#160.

* rename override_domain to dns_challenge_override_domain

* Update CertMagic; fix spelling

Co-authored-by: Matthew Holt <mholt@users.noreply.github.com>
2022-03-08 12:03:43 -07:00
..
addresses_fuzz.go ci: fuzz: switch engine from libfuzzer to native go-fuzz (#3194) 2020-03-26 18:20:34 -06:00
addresses_test.go httpcaddyfile: Preserve IPv6 addresses through normalization (fix #4381) 2021-10-20 10:27:59 -06:00
addresses.go httpcaddyfile: Add default_bind global option (#4531) 2022-01-18 11:29:07 -07:00
builtins_test.go caddyhttp: Split up logged remote address into IP and port (#4403) 2021-11-29 01:18:35 -05:00
builtins.go caddytls: dns_challenge_override_domain for challenge delegation (#4596) 2022-03-08 12:03:43 -07:00
directives_test.go tests: Clean up redundant type declarations 2020-04-10 08:48:21 -06:00
directives.go rewrite: Add method Caddyfile directive (#4528) 2022-01-18 12:17:35 -07:00
httptype_test.go caddyfile: Introduce basic linting and fmt check (#3923) 2021-01-04 11:11:36 -07:00
httptype.go caddytls: Support external certificate Managers (like Tailscale) (#4541) 2022-02-17 15:40:34 -07:00
options_test.go caddyconfig: add global option for configuring loggers (#4028) 2021-03-12 13:00:02 -07:00
options.go caddytls: Support external certificate Managers (like Tailscale) (#4541) 2022-02-17 15:40:34 -07:00
pkiapp.go httpcaddyfile: Add pki app root and intermediate cert/key config (#4514) 2022-01-18 12:18:31 -07:00
serveroptions.go httpcaddyfile: Support explicitly turning off strict_sni_host (#4592) 2022-03-01 20:02:39 -05:00
tlsapp_test.go httpcaddyfile: Revise automation policy generation (#3824) 2020-10-28 20:36:00 -06:00
tlsapp.go httpcaddyfile: Disabling OCSP stapling for both managed and unmanaged (#4589) 2022-02-19 14:20:38 -07:00