caddy/modules/caddyhttp
Matthew Holt 88fd5f3491
caddyhttp: Use internal issuer for IPs when no APs configured
This fixes a regression in 2.8 where IP addresses
would be considered qualifying for public certs
by auto-HTTPS. The default issuers do not issue
IP certs at this time, so if no APs are explicitly
configured, we assign them to the internal
issuer. We have to add a couple lines of code because
CertMagic can no longer consider IPs as not
qualifying for public certs, since there are public CAs
that issue IP certs. This edge case is specific to Caddy's
auto-HTTPS.

Without this patch, Caddy will try using Let's Encrypt
or ZeroSSL's ACME endpoint to get IP certs, neither
of which support that.
2024-10-04 10:23:30 -06:00
..
caddyauth perf: use zap's Check() to prevent useless allocs (#6560) 2024-09-13 11:16:37 -06:00
encode chore: Use slices package where possible (#6585) 2024-09-25 14:30:56 -06:00
fileserver caddyhttp: Escaping placeholders in CEL, add vars and vars_regexp (#6594) 2024-10-02 06:34:04 -06:00
headers chore: Use slices package where possible (#6585) 2024-09-25 14:30:56 -06:00
intercept perf: use zap's Check() to prevent useless allocs (#6560) 2024-09-13 11:16:37 -06:00
logging logging: Implement log_append handler (#6066) 2024-03-05 17:03:59 -07:00
map chore: Use slices package where possible (#6585) 2024-09-25 14:30:56 -06:00
proxyprotocol core: Implement socket activation listeners (#6573) 2024-09-30 10:55:03 -06:00
push perf: use zap's Check() to prevent useless allocs (#6560) 2024-09-13 11:16:37 -06:00
requestbody perf: use zap's Check() to prevent useless allocs (#6560) 2024-09-13 11:16:37 -06:00
reverseproxy chore: Adjust incorrect reverse_proxy Caddyfile comment (#6598) 2024-10-01 10:56:30 -06:00
rewrite perf: use zap's Check() to prevent useless allocs (#6560) 2024-09-13 11:16:37 -06:00
standard caddyhttp: New experimental handler for intercepting responses (#6232) 2024-05-13 17:38:18 +00:00
templates caddyhttp: Escaping placeholders in CEL, add vars and vars_regexp (#6594) 2024-10-02 06:34:04 -06:00
tracing perf: use zap's Check() to prevent useless allocs (#6560) 2024-09-13 11:16:37 -06:00
app.go metrics: scope metrics to active config, add optional per-host metrics (#6531) 2024-10-02 08:23:26 -06:00
autohttps.go caddyhttp: Use internal issuer for IPs when no APs configured 2024-10-04 10:23:30 -06:00
caddyhttp.go caddyhttp: properly sanitize requests for root path (#6360) 2024-06-02 03:40:59 +00:00
caddyhttp_test.go caddyhttp: Add test cases to corpus (#6374) 2024-06-04 14:23:55 -06:00
celmatcher.go caddyhttp: Escaping placeholders in CEL, add vars and vars_regexp (#6594) 2024-10-02 06:34:04 -06:00
celmatcher_test.go caddyhttp: Escaping placeholders in CEL, add vars and vars_regexp (#6594) 2024-10-02 06:34:04 -06:00
errors.go caddyhttp: Preserve original error (fix #5652) 2023-07-25 09:41:56 -06:00
http2listener.go caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929) 2023-04-10 17:05:02 +00:00
httpredirectlistener.go httpredirectlistener: Only set read limit for when request is HTTP (#5917) 2023-11-20 12:31:36 +00:00
invoke.go caddyhttp: Implement named routes, invoke directive (#5107) 2023-05-16 15:27:52 +00:00
ip_matchers.go perf: use zap's Check() to prevent useless allocs (#6560) 2024-09-13 11:16:37 -06:00
ip_range.go Move PrivateRangesCIDR() back: add a pass-through function (#6514) 2024-08-12 05:47:05 -04:00
logging.go perf: use zap's Check() to prevent useless allocs (#6560) 2024-09-13 11:16:37 -06:00
marshalers.go caddyhttp: Replace sensitive headers with REDACTED (close #5669) 2024-03-29 14:42:20 -06:00
matchers.go caddyhttp: Escaping placeholders in CEL, add vars and vars_regexp (#6594) 2024-10-02 06:34:04 -06:00
matchers_test.go caddyhttp: Convert IDNs to ASCII when provisioning Host matcher 2024-06-18 14:44:05 -06:00
metrics.go metrics: scope metrics to active config, add optional per-host metrics (#6531) 2024-10-02 08:23:26 -06:00
metrics_test.go metrics: scope metrics to active config, add optional per-host metrics (#6531) 2024-10-02 08:23:26 -06:00
replacer.go caddyhttp: Reject 0-RTT early data in IP matchers and set Early-Data header when proxying (#6427) 2024-07-05 10:46:20 -06:00
replacer_test.go caddyhttp: add http.request.local{,.host,.port} placeholder (#6182) 2024-03-27 21:36:53 +00:00
responsematchers.go caddyfile: Normalize & flatten all unmarshalers (#6037) 2024-01-23 19:36:59 -05:00
responsematchers_test.go reverseproxy: Add handle_response blocks to reverse_proxy (#3710) (#4021) 2021-05-02 12:39:06 -06:00
responsewriter.go http: ReponseWriter prefer ReadFrom if available (#6565) 2024-10-01 11:19:03 -06:00
responsewriter_test.go caddyhttp: Address some Go 1.20 features (#6252) 2024-04-24 00:05:57 +00:00
routes.go metrics: scope metrics to active config, add optional per-host metrics (#6531) 2024-10-02 08:23:26 -06:00
server.go core: Implement socket activation listeners (#6573) 2024-09-30 10:55:03 -06:00
server_test.go perf: use zap's Check() to prevent useless allocs (#6560) 2024-09-13 11:16:37 -06:00
staticerror.go caddyhttp: run error (msg) through replacer (#6536) 2024-08-22 11:32:44 -06:00
staticresp.go core: Implement socket activation listeners (#6573) 2024-09-30 10:55:03 -06:00
staticresp_test.go Move from deprecated ioutil to os and io packages (#4364) 2021-09-29 11:17:48 -06:00
subroute.go reverseproxy: Enable changing only the status code (close #2920) 2020-06-04 12:06:38 -06:00
vars.go caddyhttp: Escaping placeholders in CEL, add vars and vars_regexp (#6594) 2024-10-02 06:34:04 -06:00