caddy/caddytls
Matt Holt 4d9ee000c8
httpserver: Prevent TLS client authentication bypass in 3 ways (#2099)
- Introduce StrictHostMatching mode for sites that require clientauth
- Error if QUIC is enabled whilst TLS clientauth is configured
  (Our QUIC implementation does not yet support TLS clientauth, but
  maybe it will in the future - fixes #2095)
- Error if one but not all TLS configs for the same hostname have a
  different ClientAuth CA pool
2018-03-30 14:40:04 -06:00
..
storagetest Apply Apache license to all .go source files (closes #1865) 2017-09-22 23:56:58 -06:00
certificates_test.go tls: Fall back to certificate keyed by empty name (fixes #2035) (#2037) 2018-03-17 17:03:12 -06:00
certificates.go tls: Fall back to certificate keyed by empty name (fixes #2035) (#2037) 2018-03-17 17:03:12 -06:00
client_test.go Apply Apache license to all .go source files (closes #1865) 2017-09-22 23:56:58 -06:00
client.go tls: Prevent directory traversal via On-Demand TLS (fixes #2092) 2018-03-28 12:04:35 -06:00
config_test.go Apply Apache license to all .go source files (closes #1865) 2017-09-22 23:56:58 -06:00
config.go httpserver: Prevent TLS client authentication bypass in 3 ways (#2099) 2018-03-30 14:40:04 -06:00
crypto_test.go Apply Apache license to all .go source files (closes #1865) 2017-09-22 23:56:58 -06:00
crypto.go Merge branch 'master' into acmev2 2018-03-17 17:05:30 -06:00
filestorage_test.go tls: Fix tests on Windows (#2093) 2018-03-28 12:42:47 -06:00
filestorage.go tls: Prevent directory traversal via On-Demand TLS (fixes #2092) 2018-03-28 12:04:35 -06:00
filestoragesync.go tls: Prevent directory traversal via On-Demand TLS (fixes #2092) 2018-03-28 12:04:35 -06:00
handshake_test.go tls: Fall back to certificate keyed by empty name (fixes #2035) (#2037) 2018-03-17 17:03:12 -06:00
handshake.go tls: Fall back to certificate keyed by empty name (fixes #2035) (#2037) 2018-03-17 17:03:12 -06:00
httphandler_test.go tls: Fix HTTP->HTTPS redirects and HTTP challenge when using custom port 2018-02-16 12:05:34 -07:00
httphandler.go Dangit, goimports imported the wrong acme package 2018-03-15 19:38:29 -06:00
maintain.go tls: Avoid nil pointer deref when parsing corrupt OCSP staple files 2018-02-21 10:53:12 -07:00
setup_test.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00
setup.go Merge branch 'master' into acmev2 2018-03-25 21:56:11 -06:00
storage.go tls: Prevent directory traversal via On-Demand TLS (fixes #2092) 2018-03-28 12:04:35 -06:00
tls_test.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00
tls.go tls: Support distributed solving of the HTTP-01 challenge 2018-03-15 19:30:45 -06:00
user_test.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00
user.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00