serv/caddy
1
0
Fork 0
mirror of https://github.com/caddyserver/caddy.git synced 2025-01-28 04:45:56 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

reverse_proxy: Customize SNI value in upstream request (closes #2483)

Browse source
This commit is contained in:
Matthew Holt 2019-10-10 17:17:06 -06:00
parent 715e6ddf51
commit 8715a28320
No known key found for this signature in database
GPG key ID: 2A349DD577D586A5
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
modules/caddyhttp/reverseproxy/httptransport.go
View file

@ -147,6 +147,7 @@ type TLSConfig struct {
ClientCertificateKeyFile string `json:"client_certificate_key_file,omitempty"` ClientCertificateKeyFile string `json:"client_certificate_key_file,omitempty"`
InsecureSkipVerify bool `json:"insecure_skip_verify,omitempty"` InsecureSkipVerify bool `json:"insecure_skip_verify,omitempty"`
HandshakeTimeout caddy.Duration `json:"handshake_timeout,omitempty"` HandshakeTimeout caddy.Duration `json:"handshake_timeout,omitempty"`
ServerName string `json:"server_name,omitempty"`
} }
// MakeTLSClientConfig returns a tls.Config usable by a client to a backend. // MakeTLSClientConfig returns a tls.Config usable by a client to a backend.
@ -182,6 +183,9 @@ func (t TLSConfig) MakeTLSClientConfig() (*tls.Config, error) {
cfg.RootCAs = rootPool cfg.RootCAs = rootPool
} }
// custom SNI
cfg.ServerName = t.ServerName
// throw all security out the window // throw all security out the window
cfg.InsecureSkipVerify = t.InsecureSkipVerify cfg.InsecureSkipVerify = t.InsecureSkipVerify