caddy/modules/caddytls
Herman Slatman 80eb3e81e5
Move intermediate lifetime configuration check
In #7272 a check was changed to ensure that generated intermediate
certificates would always use a lifetime that falls within the
lifetime of the root. However, when a root and intermediate(s)
are supplied, the configuration value was being used instead of
the actual lifetimes of the certificates. The check was moved to
only be performed when an intermediate is generated; not when
loaded from disk.
2025-12-03 11:58:35 +01:00
..
distributedstek ci: use gci linter (#5708) 2023-08-14 09:41:15 -06:00
standardstek all: Recover from panics in goroutines 2020-05-12 11:36:20 -06:00
acmeissuer.go caddytls: Allow disabling distributed solving (except http-01) 2025-09-04 08:51:36 -06:00
automation.go caddytls: Allow disabling distributed solving (except http-01) 2025-09-04 08:51:36 -06:00
capools.go caddypki: Add support for multiple intermediates in signing chain 2025-12-03 11:58:33 +01:00
capools_test.go Fix typos (#6311) 2024-05-10 08:08:54 -06:00
certmanagers.go caddytls: Set local_ip, not remote_ip (#6952) 2025-04-21 18:32:51 -06:00
certselection.go Use slices.Contains to simplify code (#7039) 2025-05-31 12:03:06 -06:00
connpolicy.go docs: fix some minor issues in the comments (#7101) 2025-06-30 06:50:00 +00:00
connpolicy_test.go caddytls: Fix TrustedCACerts backwards compatibility (#6889) 2025-03-10 12:50:47 -06:00
ech.go Ignore irrelevant linter warning 2025-08-04 16:28:13 -06:00
fileloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
folderloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
internalissuer.go caddyfile: add error handling for unrecognized subdirective/options in various modules (#6884) 2025-03-08 23:45:05 +03:00
internalissuer_test.go Move intermediate lifetime configuration check 2025-12-03 11:58:35 +01:00
leaffileloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leaffileloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leaffolderloader.go caddytls: correct documentation of LeafFolderLoader (#7327) 2025-11-01 18:29:55 +03:00
leaffolderloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafpemloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leafpemloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafstorageloader.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
matchers.go caddytls: Refactor sni matcher (#6812) 2025-01-27 11:42:09 -07:00
matchers_test.go caddytls: Add sni_regexp matcher (#6569) 2024-09-11 20:51:59 -06:00
ondemand.go caddyhttp: Add MatchWithError to replace SetVar hack (#6596) 2024-11-04 23:18:50 +00:00
pemloader.go tls: accept placeholders in string values of certificate loaders (#5963) 2023-12-04 09:23:15 -07:00
sessiontickets.go all: Recover from panics in goroutines 2020-05-12 11:36:20 -06:00
storageloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
tls.go caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959) 2025-04-18 11:44:23 -06:00
values.go Fix typo in TLS group x25519mlkem768 2025-03-03 10:26:42 -07:00
zerosslissuer.go caddytls: Upgrade ACMEz to v2; support ZeroSSL API; various fixes (#6229) 2024-04-13 21:31:43 -04:00