Matt Holt
eb3bbc409f
Merge pull request #1036 from mholt/fix-errors-setup-test
...
Fix error which lead to skipping tests in 'errors.TestErrorsParse'
2016-08-15 10:09:46 -06:00
Volodymyr Galkin
b830667a25
Fix error which lead to skipping tests in 'errors.TestErrorsParse'
2016-08-15 16:44:34 +03:00
Matt Holt
ba5aeab19d
Merge pull request #1032 from mholt/errors-config-check-duplicate-status-codes
...
Check for duplicate status code entries in 'errors' directive
2016-08-12 09:28:51 -06:00
Volodymyr Galkin
441a8f5eff
Check for duplicate status code entries in 'errors' directive
2016-08-12 16:47:00 +03:00
Matt Holt
4f6500c95b
Merge pull request #1028 from evvvvr/wildcard-error-page-752
...
Add support for default (wildcard) error page
2016-08-11 23:33:44 -06:00
Carter
7dd385f6b4
Merge pull request #1023 from mholt/log-request-body
...
Now logging the request body
2016-08-11 22:32:32 -04:00
Matt Holt
ac0dd303be
Merge branch 'master' into log-request-body
2016-08-11 17:36:09 -06:00
Carter
676202a31e
Fixed styling and byte count
2016-08-11 19:08:49 -04:00
Matthew Holt
c8a99d2f81
Don't use X-Forwarded-For for {remote} placeholder ( closes #1025 )
2016-08-11 16:54:17 -06:00
Carter
8e8e2f596d
Merge branch 'master' into log-request-body
2016-08-11 18:08:19 -04:00
Volodymyr Galkin
f7003bee3f
Add support for default (wildcard) error page
2016-08-11 15:51:15 +03:00
Carter
532ab661c7
Fully read and close the request body
2016-08-11 07:03:14 -04:00
Matthew Holt
68be4a9161
Don't prompt for email when user is not there to provide one
...
Also don't bother showing stdout output in same situation
2016-08-10 23:46:04 -06:00
Matthew Holt
46bc0d5c4e
Whoops, finishing up the last commit properly
...
Need to add the name to namesObtaining each time we use the ACME client.
2016-08-10 23:44:43 -06:00
Matthew Holt
8e75ae2495
Only consume HTTP challenge for names we are solving for ( closes #549 )
...
If another ACME client is trying to solve a challenge for a name not
being served by Caddy on the same machine where Caddy is running, the
HTTP challenge will be consumed by Caddy rather than allowing the owner
to use the Caddyfile to proxy the challenge.
With this change, we only consume requests for HTTP challenges for
hostnames that we recognize. Before doing the challenge, we add the
name to a set, and when seeing if we should proxy the challenge, we
first check the path of course to see if it is an HTTP challenge;
if it is, we then check that set to see if the hostname is in the
set. Only if it is, do we consume it.
Otherwise, the request is treated like any other, allowing the owner
to configure a proxy for such requests to another ACME client.
2016-08-10 22:13:06 -06:00
Carter
d56ac28bec
Using a LimitReader and fixed test and log format.
2016-08-10 22:43:26 -04:00
Carter
3fd8218f67
refactor and added test
2016-08-10 11:04:37 -04:00
Carter
d06c15cae6
Set the request body to a new ReadCloser
2016-08-10 10:36:16 -04:00
Carter
59b1e8b0bc
Now logging the request body
...
Logging the request body if the Content-Type is application/json or
application/xml
2016-08-10 10:04:57 -04:00
Daniel van Dorp
dbd76f7a57
dist/init/linux-sysvinit: process @weingart's feedback ( #1008 )
...
* dist/init/linux-sysvinit: use kill -0 to test process status
* dist/init/linux-sysvinit: use service (as root) instead of /etc/init.d/
2016-08-09 22:29:13 -06:00
Matthew Holt
e081d8b5c2
Maintainence routine deletes old (expired) OCSP staple files
2016-08-09 16:46:51 -06:00
Matthew Holt
8eefeb6788
Begin improved OCSP stapling by persisting staple to disk
2016-08-09 16:12:22 -06:00
Abiola Ibrahim
5fb3c504c9
Merge pull request #1017 from shawnps/patch-2
...
fix typo
2016-08-09 09:18:41 +01:00
Shawn Smith
0f04f2fd44
fix typo
2016-08-09 14:57:17 +09:00
Matthew Holt
ce8b1dfe94
Warn upon use of proxy_header
2016-08-08 13:48:13 -06:00
elcore
4b3c532573
Use P384 for TestUser (privateKey) ( #1009 )
2016-08-08 11:13:10 -06:00
Carter
4d76ccb1c4
Rounding the latency in certain scenarios ( #1005 )
...
* Rounding the latency in certain scenarios
* run gofmt
2016-08-08 10:14:53 -06:00
Simon Lightfoot
de7bf4f241
Enable downloading of protected content. See issue #979 ( #980 )
...
* Fix for stripping of 'Content-Disposition' and other headers from 'X-Accel-Redirect' redirect scripts.
* Added test case for header manipulation of redirect response.
2016-08-07 23:16:33 -06:00
Stavros Korokithakis
681c95a749
Add default "Restricted" realm to HTTP Basic auth ( #1007 )
...
* Add default "Restricted" realm to HTTP Basic auth
* Add tests for the Basic auth realm
2016-08-07 07:50:36 -06:00
elcore
e5a8927635
Allow just one TLS Protocol (Caddyfile) ( #1004 )
...
* Allow just one TLS Protocol
* Fix typo
2016-08-06 15:00:54 -06:00
Matthew Holt
2019eec5a5
Fix lint warnings; group methods for same type together
2016-08-06 14:46:52 -06:00
Matthew Holt
33d1033928
Add link to clean code guidelines for reference
2016-08-06 14:43:31 -06:00
Matthew Holt
0d8b95334f
Use Let's Encrypt's permalink to subscriber agreement
2016-08-06 14:42:00 -06:00
Matthew Holt
ee615371a8
Export staticfiles.Redirect for convenience in preserving query string
2016-08-06 14:40:58 -06:00
Nimi Wariboko Jr
4c6082df64
Merge pull request #987 from nemothekid/proxy/single-webconn
...
Proxy: Single WebSocket connection
2016-08-05 16:59:38 -07:00
Nimi Wariboko Jr
8898066455
Merge branch 'master' into proxy/single-webconn
2016-08-05 16:57:54 -07:00
Nimi Wariboko Jr
fffc1bed73
Merge pull request #984 from nemothekid/proxy/keepalive-directive
...
Proxy: Add keepalive directive to proxy to set MaxIdleConnsPerHost on transport
2016-08-05 16:57:44 -07:00
Nimi Wariboko Jr
824ec6cb95
Merge branch 'master' into proxy/keepalive-directive
2016-08-05 16:20:37 -07:00
Nimi Wariboko Jr
5b5e365295
Instead of treating 0 is a default value, use http.DefaultMaxIdleConnsPerHost
2016-08-05 15:41:32 -07:00
Matt Holt
c6c221b8db
Merge pull request #996 from tw4452852/host_header
...
proxy: add Host header checking
2016-08-05 16:20:06 -06:00
Daniel van Dorp
985049e0c2
Merge pull request #1003 from mholt/sysvinit-fix-setcap
...
dist/init/linux-sysvinit: execute setcap directly
2016-08-05 16:49:24 +02:00
Daniel van Dorp
3a4f8e8d0c
dist/init/linux-sysvinit: execute setcap directly
...
`$(which setcap)` might evaluate to nothing,
and this way the error thrown will be more clear.
If setcap is not available on Debian/Ubuntu,
you can install the package `libcap2-bin`
2016-08-05 16:33:47 +02:00
Daniel van Dorp
f3a3bf6204
dist/init/linux-sysvinit: improve legacy compatibility ( #1002 )
...
* dist/init/linux-sysvinit: pass --oknodo for --start as well
* dist/init/linux-sysvinit: manually rm PIDFILE
Since start-stop-daemon --remove-pidfile is new and not present
everywhere.
2016-08-05 08:15:32 -06:00
Daniel van Dorp
81a3101efe
Merge pull request #1001 from mholt/sysvinit-typo
...
dist/init/linux-sysvinit: fix minor typo in DAEMONOPTS
2016-08-05 14:13:33 +02:00
Daniel van Dorp
22a4b6cde2
dist/init/linux-sysvinit: fix minor typo in DAEMONOPTS
2016-08-05 14:04:30 +02:00
Tw
94c63e42d6
proxy: add Host header checking
...
fix issue #993
Signed-off-by: Tw <tw19881113@gmail.com>
2016-08-04 13:07:20 +08:00
s7v7nislands
c110b27ef5
improve rlimit usage ( #982 )
...
* improve rlimit usage
* fix windows build
* fix code style
2016-08-02 21:01:36 -06:00
Nimi Wariboko Jr
6e9439d22e
Proxy: Fix data race in test.
2016-08-02 12:39:15 -07:00
Nimi Wariboko Jr
f4cdf53761
Proxy: Fix transport defn; cleanup connection.
2016-08-02 12:31:17 -07:00
Matt Holt
89f5b646c3
Merge pull request #978 from krishamoud/master
...
added ip_hash load balancing
2016-08-02 11:25:52 -06:00