caddy/modules
Matt Holt d129ae6aec
caddytls: Evict internal certs from cache based on issuer (#6266)
* caddytls: Evict internal certs from cache based on issuer

During a config reload, we would keep certs in the cache fi they were used  by the next config. If one config uses InternalIssuer and the other uses a public CA, this behavior is problematic / unintuitive, because there is a big difference between private/public CAs.

This change should ensure that internal issuers are considered when deciding whether to keep or evict from the cache during a reload, by making them distinct from each other and certs from public CAs.

* Make sure new TLS app manages configured certs

* Actually make it work
2024-04-30 16:15:54 -06:00
..
caddyevents events: Add debug log 2024-04-26 18:59:08 -06:00
caddyfs filesystem: Globally declared filesystems, fs directive (#5833) 2024-01-13 20:12:43 +00:00
caddyhttp chore: add warn logs when using deprecated fields (#6276) 2024-04-27 15:51:00 -04:00
caddypki acmeserver: add policy field to define allow/deny rules (#5796) 2024-02-24 02:26:00 +03:00
caddytls caddytls: Evict internal certs from cache based on issuer (#6266) 2024-04-30 16:15:54 -06:00
filestorage caddyfile: Normalize & flatten all unmarshalers (#6037) 2024-01-23 19:36:59 -05:00
logging logging: support ms duration format and add docs (#6187) 2024-03-21 22:17:09 -04:00
metrics caddyfile: Normalize & flatten all unmarshalers (#6037) 2024-01-23 19:36:59 -05:00
standard filesystem: Globally declared filesystems, fs directive (#5833) 2024-01-13 20:12:43 +00:00