Optionally enforce strict TLS SNI + HTTP Host matching, & misc. cleanup

We should look into a way to enable this by default when TLS client auth
is configured for a server
This commit is contained in:
Matthew Holt 2019-06-26 16:03:29 -06:00
parent a524bcfe78
commit 2b22d2e6ea
4 changed files with 49 additions and 14 deletions

View file

@ -13,8 +13,8 @@ import (
// Context is a type which defines the lifetime of modules that
// are loaded and provides access to the parent configuration
// that spawned the modules which are loaded. It should be used
// with care and only wrapped with derivation functions from
// the standard context package if you don't need the Caddy
// with care and wrapped with derivation functions from the
// standard context package only if you don't need the Caddy
// specific features. These contexts are cancelled when the
// lifetime of the modules loaded from it are over.
//