Matt Holt 4d9ee000c8

httpserver: Prevent TLS client authentication bypass in 3 ways (#2099) ...

- Introduce StrictHostMatching mode for sites that require clientauth
- Error if QUIC is enabled whilst TLS clientauth is configured
  (Our QUIC implementation does not yet support TLS clientauth, but
  maybe it will in the future - fixes #2095)
- Error if one but not all TLS configs for the same hostname have a
  different ClientAuth CA pool

2018-03-30 14:40:04 -06:00

..

storagetest

Apply Apache license to all .go source files (closes #1865)

2017-09-22 23:56:58 -06:00

certificates_test.go

tls: Fall back to certificate keyed by empty name (fixes #2035) (#2037)

2018-03-17 17:03:12 -06:00

certificates.go

tls: Fall back to certificate keyed by empty name (fixes #2035) (#2037)

2018-03-17 17:03:12 -06:00

client_test.go

Apply Apache license to all .go source files (closes #1865)

2017-09-22 23:56:58 -06:00

client.go

tls: Prevent directory traversal via On-Demand TLS (fixes #2092)

2018-03-28 12:04:35 -06:00

config_test.go

Apply Apache license to all .go source files (closes #1865)

2017-09-22 23:56:58 -06:00

config.go

httpserver: Prevent TLS client authentication bypass in 3 ways (#2099)

2018-03-30 14:40:04 -06:00

crypto_test.go

Apply Apache license to all .go source files (closes #1865)

2017-09-22 23:56:58 -06:00

crypto.go

Merge branch 'master' into acmev2

2018-03-17 17:05:30 -06:00

filestorage_test.go

tls: Fix tests on Windows (#2093)

2018-03-28 12:42:47 -06:00

filestorage.go

tls: Prevent directory traversal via On-Demand TLS (fixes #2092)

2018-03-28 12:04:35 -06:00

filestoragesync.go

tls: Prevent directory traversal via On-Demand TLS (fixes #2092)

2018-03-28 12:04:35 -06:00

handshake_test.go

tls: Fall back to certificate keyed by empty name (fixes #2035) (#2037)

2018-03-17 17:03:12 -06:00

handshake.go

tls: Fall back to certificate keyed by empty name (fixes #2035) (#2037)

2018-03-17 17:03:12 -06:00

httphandler_test.go

tls: Fix HTTP->HTTPS redirects and HTTP challenge when using custom port

2018-02-16 12:05:34 -07:00

httphandler.go

Dangit, goimports imported the wrong acme package

2018-03-15 19:38:29 -06:00

maintain.go

tls: Avoid nil pointer deref when parsing corrupt OCSP staple files

2018-02-21 10:53:12 -07:00

setup_test.go

tls: Initial transition to ACMEv2 and support automatic wildcard certs

2018-03-14 21:44:08 -06:00

setup.go

Merge branch 'master' into acmev2

2018-03-25 21:56:11 -06:00

storage.go

tls: Prevent directory traversal via On-Demand TLS (fixes #2092)

2018-03-28 12:04:35 -06:00

tls_test.go

tls: Initial transition to ACMEv2 and support automatic wildcard certs

2018-03-14 21:44:08 -06:00

tls.go

tls: Support distributed solving of the HTTP-01 challenge

2018-03-15 19:30:45 -06:00

user_test.go

tls: Initial transition to ACMEv2 and support automatic wildcard certs

2018-03-14 21:44:08 -06:00

user.go

tls: Initial transition to ACMEv2 and support automatic wildcard certs

2018-03-14 21:44:08 -06:00