caddy/modules/caddytls
Ran Chen d9b1d46325
caddytls: dns_challenge_override_domain for challenge delegation (#4596)
* Add a override_domain option to allow DNS chanllenge delegation

CNAME can be used to delegate answering the chanllenge to another DNS
zone. One usage is to reduce the exposure of the DNS credential [1].
Based on the discussion in caddy/certmagic#160, we are adding an option
to allow the user explicitly specify the domain to delegate, instead of
following the CNAME chain.

This needs caddy/certmagic#160.

* rename override_domain to dns_challenge_override_domain

* Update CertMagic; fix spelling

Co-authored-by: Matthew Holt <mholt@users.noreply.github.com>
2022-03-08 12:03:43 -07:00
..
distributedstek ci: Use golangci's github action for linting (#3794) 2020-11-22 14:50:29 -07:00
standardstek all: Recover from panics in goroutines 2020-05-12 11:36:20 -06:00
acmeissuer.go caddytls: dns_challenge_override_domain for challenge delegation (#4596) 2022-03-08 12:03:43 -07:00
automation.go caddytls: dns_challenge_override_domain for challenge delegation (#4596) 2022-03-08 12:03:43 -07:00
certmanagers.go caddytls: Support external certificate Managers (like Tailscale) (#4541) 2022-02-17 15:40:34 -07:00
certselection.go caddytls: Encode big.Int as string with JSON 2020-04-02 09:43:33 -06:00
connpolicy.go Move from deprecated ioutil to os and io packages (#4364) 2021-09-29 11:17:48 -06:00
fileloader.go Move from deprecated ioutil to os and io packages (#4364) 2021-09-29 11:17:48 -06:00
folderloader.go caddytls: Support external certificate Managers (like Tailscale) (#4541) 2022-02-17 15:40:34 -07:00
internalissuer.go caddytls: Add internal Caddyfile lifetime, sign_with_root opts (#4513) 2022-01-18 12:19:50 -07:00
matchers.go caddytls: Fix MatchRemoteIP provisoning with multiple CIDR ranges (#4522) 2022-01-13 11:56:18 -05:00
matchers_test.go caddytls: Implement remote IP connection matcher (#4123) 2021-04-30 10:14:52 -06:00
pemloader.go Minor tweaks 2021-04-01 12:49:51 -06:00
sessiontickets.go all: Recover from panics in goroutines 2020-05-12 11:36:20 -06:00
storageloader.go caddytls: Add load_storage module (#4055) 2021-04-21 17:05:55 -06:00
tls.go caddytls: Mark storage clean timestamp at end of routine (#4401) 2021-11-02 08:27:25 -06:00
values.go go.mod: Upgrade some dependencies 2020-12-08 14:06:52 -07:00
zerosslissuer.go caddytls: Save email with account if not already specified 2021-02-10 19:49:23 -07:00