CERBERUS/caddy
1
0
Fork 0
mirror of https://github.com/caddyserver/caddy.git synced 2026-11-02 03:35:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
caddy/modules/caddytls
History
moscowchill d42d39b4bc
caddytls: Return errors instead of nil in client auth provisioning (#7464) 
Two error returns in ClientAuthentication.provision() were
returning nil instead of the actual error, silently swallowing
failures when converting PEM files to DER and when provisioning
the CA pool. This could cause mTLS client authentication to
silently fall back to the system trust store, accepting any
client certificate signed by a public CA instead of restricting
to the configured trust anchors.
2026-02-12 08:42:54 -07:00
..
distributedstek
standardstek
acmeissuer.go caddytls: fix preferred chains options by appending values instead of replacing (#7387) 2025-12-07 16:19:01 +00:00
automation.go caddytls: Allow disabling distributed solving (except http-01) 2025-09-04 08:51:36 -06:00
capools.go caddytls: Check type assertion 2026-02-03 13:59:53 -07:00
capools_test.go Fix typos (#6311) 2024-05-10 08:08:54 -06:00
certmanagers.go caddytls: Set local_ip, not remote_ip (#6952) 2025-04-21 18:32:51 -06:00
certselection.go Use slices.Contains to simplify code (#7039) 2025-05-31 12:03:06 -06:00
connpolicy.go caddytls: Return errors instead of nil in client auth provisioning (#7464) 2026-02-12 08:42:54 -07:00
connpolicy_test.go caddytls: Fix TrustedCACerts backwards compatibility (#6889) 2025-03-10 12:50:47 -06:00
ech.go caddtls: Skip .ts.net domains for ECH (#6971) 2026-01-30 12:24:59 -07:00
fileloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
folderloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
internalissuer.go caddypki: Add support for multiple intermediates in signing chain (#7057) 2025-12-03 11:30:00 -07:00
internalissuer_test.go caddypki: Add support for multiple intermediates in signing chain (#7057) 2025-12-03 11:30:00 -07:00
leaffileloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leaffileloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leaffolderloader.go caddytls: correct documentation of LeafFolderLoader (#7327) 2025-11-01 18:29:55 +03:00
leaffolderloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafpemloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leafpemloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafstorageloader.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
matchers.go caddytls: Refactor sni matcher (#6812) 2025-01-27 11:42:09 -07:00
matchers_test.go caddytls: Add sni_regexp matcher (#6569) 2024-09-11 20:51:59 -06:00
ondemand.go caddyhttp: Add MatchWithError to replace SetVar hack (#6596) 2024-11-04 23:18:50 +00:00
pemloader.go
sessiontickets.go
storageloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
tls.go caddytls: ECH key rotation (#7356) 2025-12-10 11:50:35 -07:00
values.go Fix typo in TLS group x25519mlkem768 2025-03-03 10:26:42 -07:00
zerosslissuer.go caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229) 2024-04-13 21:31:43 -04:00