caddy/modules/caddytls
Rijul 0fab9f0f7d
Some checks failed
Tests / test (./cmd/caddy/caddy, ~1.26.0, macos-14, 0, 1.26, mac) (push) Has been cancelled
Tests / test (./cmd/caddy/caddy, ~1.26.0, ubuntu-latest, 0, 1.26, linux) (push) Has been cancelled
Tests / test (./cmd/caddy/caddy.exe, ~1.26.0, windows-latest, True, 1.26, windows) (push) Has been cancelled
Tests / test (s390x on IBM Z) (push) Has been cancelled
Tests / goreleaser-check (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, aix) (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, darwin) (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, dragonfly) (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, freebsd) (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, illumos) (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, linux) (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, netbsd) (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, openbsd) (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, solaris) (push) Has been cancelled
Cross-Build / build (~1.26.0, 1.26, windows) (push) Has been cancelled
Lint / lint (push) Has been cancelled
Lint / lint-1 (push) Has been cancelled
Lint / lint-2 (push) Has been cancelled
Lint / govulncheck (push) Has been cancelled
Lint / dependency-review (push) Has been cancelled
OpenSSF Scorecard supply-chain security / Scorecard analysis (push) Has been cancelled
caddytls: avoid duplicate automation for wildcard-covered hosts (#7697)
* caddytls: Fix wildcard race in auto-HTTPS launch

When evaluating whether to skip managing an individual subdomain
due to an existing wildcard configuration, we now explicitly consult
the automate loader.

Because Caddy apps can start in any order, relying strictly on the
TLS app's internal management state was non-deterministic if the
HTTP app started first. Checking the automate loader guarantees
predictable behavior since it is fully populated during the
Provision phase, well before any apps are started.

* respond to review comments

1. update requested comment
2. remove personal domain from test
3. add regression test

* remove unnecessary mutex lock

* refactor: -integration test, +explicit cases

* refactor: remove redundant test, add comment

* rename file and add header

* update copyright year
2026-05-11 00:08:40 +10:00
..
distributedstek ci: use gci linter (#5708) 2023-08-14 09:41:15 -06:00
standardstek
acmeissuer.go caddytls: Expand ACME credentials (#7554) 2026-05-03 07:13:57 +10:00
acmeissuer_test.go caddytls: Expand ACME credentials (#7554) 2026-05-03 07:13:57 +10:00
automation.go caddytls: Avoid default issuers for implicit tailscale policies (#7577) 2026-03-20 09:36:03 -06:00
automation_test.go caddytls: Avoid default issuers for implicit tailscale policies (#7577) 2026-03-20 09:36:03 -06:00
capools.go tls: add system and combined CA pool modules (#7406) 2026-04-06 01:13:34 +03:00
capools_test.go tls: add system and combined CA pool modules (#7406) 2026-04-06 01:13:34 +03:00
certmanagers.go chore: Add nolints to work around haywire linters (#7493) 2026-02-17 16:52:54 -07:00
certselection.go Use slices.Contains to simplify code (#7039) 2025-05-31 12:03:06 -06:00
connpolicy.go tls: add alpn to managed HTTPS records (#7653) 2026-05-10 13:10:29 +10:00
connpolicy_test.go caddytls: Fix TrustedCACerts backwards compatibility (#6889) 2025-03-10 12:50:47 -06:00
ech.go tls: add alpn to managed HTTPS records (#7653) 2026-05-10 13:10:29 +10:00
ech_dns_test.go tls: add alpn to managed HTTPS records (#7653) 2026-05-10 13:10:29 +10:00
fileloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
folderloader.go Fix lint errors 2026-03-11 13:33:59 -06:00
internalissuer.go caddypki: Add support for multiple intermediates in signing chain (#7057) 2025-12-03 11:30:00 -07:00
internalissuer_test.go caddypki: Add support for multiple intermediates in signing chain (#7057) 2025-12-03 11:30:00 -07:00
leaffileloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leaffileloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leaffolderloader.go caddytls: correct documentation of LeafFolderLoader (#7327) 2025-11-01 18:29:55 +03:00
leaffolderloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafpemloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leafpemloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafstorageloader.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
matchers.go caddytls: Refactor sni matcher (#6812) 2025-01-27 11:42:09 -07:00
matchers_test.go caddytls: Add sni_regexp matcher (#6569) 2024-09-11 20:51:59 -06:00
ondemand.go caddyhttp: Add MatchWithError to replace SetVar hack (#6596) 2024-11-04 23:18:50 +00:00
pemloader.go tls: accept placeholders in string values of certificate loaders (#5963) 2023-12-04 09:23:15 -07:00
sessiontickets.go
storageloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
tls.go caddytls: avoid duplicate automation for wildcard-covered hosts (#7697) 2026-05-11 00:08:40 +10:00
tls_wildcard_test.go caddytls: avoid duplicate automation for wildcard-covered hosts (#7697) 2026-05-11 00:08:40 +10:00
values.go Fix typo in TLS group x25519mlkem768 2025-03-03 10:26:42 -07:00
zerosslissuer.go chore: Add nolints to work around haywire linters (#7493) 2026-02-17 16:52:54 -07:00