caddy/modules/caddytls
Harsh Patel d7834676aa
tls: add system and combined CA pool modules (#7406)
* feat: add system and combined CA pool modules

* fix: combining pools using `CertificateProvider`

* fix: lint issue

* chore: caddyfiletests
* doing it for first time, so not sure if its right.

* fix: use `x509` native addCert

* chore: explicit err handling

* Apply suggestion from @mohammed90

---------

Co-authored-by: Mohammed Al Sahaf <mohammed@caffeinatedwonders.com>
2026-04-06 01:13:34 +03:00
..
distributedstek ci: use gci linter (#5708) 2023-08-14 09:41:15 -06:00
standardstek all: Recover from panics in goroutines 2020-05-12 11:36:20 -06:00
acmeissuer.go tls: expand placeholders in dns_challenge override_domain (#7609) 2026-03-31 05:46:32 +00:00
automation.go caddytls: Avoid default issuers for implicit tailscale policies (#7577) 2026-03-20 09:36:03 -06:00
automation_test.go caddytls: Avoid default issuers for implicit tailscale policies (#7577) 2026-03-20 09:36:03 -06:00
capools.go tls: add system and combined CA pool modules (#7406) 2026-04-06 01:13:34 +03:00
capools_test.go tls: add system and combined CA pool modules (#7406) 2026-04-06 01:13:34 +03:00
certmanagers.go chore: Add nolints to work around haywire linters (#7493) 2026-02-17 16:52:54 -07:00
certselection.go Use slices.Contains to simplify code (#7039) 2025-05-31 12:03:06 -06:00
connpolicy.go Fix lint errors 2026-03-11 13:33:59 -06:00
connpolicy_test.go caddytls: Fix TrustedCACerts backwards compatibility (#6889) 2025-03-10 12:50:47 -06:00
ech.go caddytls: Ensure key list always gets set (fix #7555) 2026-03-16 16:21:47 -06:00
fileloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
folderloader.go Fix lint errors 2026-03-11 13:33:59 -06:00
internalissuer.go caddypki: Add support for multiple intermediates in signing chain (#7057) 2025-12-03 11:30:00 -07:00
internalissuer_test.go caddypki: Add support for multiple intermediates in signing chain (#7057) 2025-12-03 11:30:00 -07:00
leaffileloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leaffileloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leaffolderloader.go caddytls: correct documentation of LeafFolderLoader (#7327) 2025-11-01 18:29:55 +03:00
leaffolderloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafpemloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leafpemloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafstorageloader.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
matchers.go caddytls: Refactor sni matcher (#6812) 2025-01-27 11:42:09 -07:00
matchers_test.go caddytls: Add sni_regexp matcher (#6569) 2024-09-11 20:51:59 -06:00
ondemand.go caddyhttp: Add MatchWithError to replace SetVar hack (#6596) 2024-11-04 23:18:50 +00:00
pemloader.go tls: accept placeholders in string values of certificate loaders (#5963) 2023-12-04 09:23:15 -07:00
sessiontickets.go all: Recover from panics in goroutines 2020-05-12 11:36:20 -06:00
storageloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
tls.go tls: Add tls_resolvers global option for DNS challenge configuration (#7297) 2026-03-01 15:32:04 -05:00
values.go Fix typo in TLS group x25519mlkem768 2025-03-03 10:26:42 -07:00
zerosslissuer.go chore: Add nolints to work around haywire linters (#7493) 2026-02-17 16:52:54 -07:00