2266 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Matthew Holt	84364ffcd0	caddypki: Remove lifetime check at Caddyfile parse (fix #6878) ... The same check is done at provision time of the ACME server, and that is the correct place to do it.	2025-03-06 11:40:03 -07:00
Matthew Holt	1641e76fd7	go.mod: Upgrade dependencies v2.10.0-beta.1	2025-03-06 09:52:02 -07:00
Matthew Holt	bc3d497739	caddytls: Fix broken refactor ... Not sure how that happened...	2025-03-06 08:54:40 -07:00
Matthew Holt	a807fe0659	caddytls: Enhance ECH documentation	2025-03-06 08:52:52 -07:00
Matthew Holt	3207769232	Update min go version in readme	2025-03-06 06:51:21 -07:00
sashaphmn	481bc80d6e	readme: update Twitter name and link (#6874)	2025-03-06 08:21:30 +00:00
dependabot[bot]	3644ee31ca	build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#6876) ... Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.3.3 to 1.3.7. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](https://github.com/cloudflare/circl/compare/v1.3.3...v1.3.7) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-05 17:11:11 -07:00
Matt Holt	d7764dfdbb	caddytls: Encrypted ClientHello (ECH) (#6862) ... * caddytls: Initial commit of Encrypted ClientHello (ECH) * WIP Caddyfile * Fill out Caddyfile support * Enhance godoc comments * Augment, don't overwrite, HTTPS records * WIP * WIP: publication history * Fix republication logic * Apply global DNS module to ACME challenges This allows DNS challenges to be enabled without locally-configured DNS modules * Ignore false positive from prealloc linter * ci: Use only latest Go version (1.24 currently) We no longer support older Go versions, for security benefits. * Remove old commented code Static ECH keys for now * Implement SendAsRetry	2025-03-05 17:04:10 -07:00
dependabot[bot]	eacd7720e9	build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4 (#6871) ... Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.3 to 3.0.4. - [Release notes](https://github.com/go-jose/go-jose/releases) - [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md) - [Commits](https://github.com/go-jose/go-jose/compare/v3.0.3...v3.0.4) --- updated-dependencies: - dependency-name: github.com/go-jose/go-jose/v3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-03-03 14:02:16 -07:00
Mohammed Al Sahaf	02e348f911	chore: upgrade cobra (#6868) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-03-03 13:49:17 -07:00
Matthew Holt	ca37c0b05f	Fix typo in TLS group x25519mlkem768	2025-03-03 10:26:42 -07:00
baruchyahalom	8861eae223	caddytest: Support configuration defaults override (#6850)	2025-03-03 14:35:54 +00:00
Marten Seemann	fd4de7e0ae	chore: update quic-go to v0.50.0 (#6854)	2025-02-20 12:45:52 +03:00
Ns2Kracy	0d7c63920d	go.mod: remove glog dependency (#6838) ... Co-authored-by: Mohammed Al Sahaf <msaa1990@gmail.com> Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-02-17 15:08:39 +00:00
Mohammed Al Sahaf	6a8d4f1d60	chore: ci: upgrade Go version to 1.24 (#6839) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-02-17 07:58:20 -07:00
Gaurav Dhameeja	d7621fdbe6	tests: tests for error handling & metrics in admin endpoints (#6805) ... * feat/tests: tests for error handling & metrics in admin endpoints - TestAdminHandlerErrorHandling - Tests the handler.handleError() functionality by directly verifying error response formatting - TestAdminHandlerBuiltinRouteErrors - Tests the error handling pathway by using real admin server routes and verifying both error responses and prometheus metrics increments - provisionAdminRouters: add unit tests for admin handler registration and routing for admin.api - TestAllowedOriginsUnixSocket: checks unix socket with default origins are added - TestReplaceRemoteAdminServer: test for replaceRemoteAdminServer with certificate validation, custom origins and cleanup * test: added test for manage manageIdentity --------- Co-authored-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-02-12 11:39:47 +00:00
Matthew Holt	172136a0a0	caddytls: Support post-quantum key exchange mechanism X25519MLKEM768 ... Also bump minimum Go version to 1.24.	2025-02-11 22:43:54 -07:00
WeidiDeng	22563a70eb	file_server: use the UTC timezone for modified time (#6830) ... * use UTC timezone for modified time * use http.ParseTime to handle If-Modified-Since * use time.Compare to simplify comparison * take the directory's modtime into consideration when calculating lastModified * update comments about If-Modified-Since's handling	2025-02-10 08:39:43 -07:00
Matthew Holt	9b74a53e51	Revert "logging: Always set fields func; fix #6829" ... This reverts commit 932dac157a3c4693b80576477498bb86208b9b30. Somehow the code I was looking at changed when I committed, without realizing it. This has already been fixed in #6777.	2025-02-07 06:23:43 -07:00
Matthew Holt	932dac157a	logging: Always set fields func; fix #6829	2025-02-07 06:18:37 -07:00
Mahdi Mohammadi	96c5c554c1	admin: fix index validation for PUT requests (#6824)	2025-02-04 08:57:32 -07:00
Mohammed Al Sahaf	9283770f68	reverseproxy: ignore duplicate collector registration error (#6820) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-02-04 10:55:30 +03:00
dependabot[bot]	9996d6a70b	build(deps): bump github.com/golang/glog from 1.2.2 to 1.2.4 (#6814) ... Bumps [github.com/golang/glog](https://github.com/golang/glog) from 1.2.2 to 1.2.4. - [Release notes](https://github.com/golang/glog/releases) - [Commits](https://github.com/golang/glog/compare/v1.2.2...v1.2.4) --- updated-dependencies: - dependency-name: github.com/golang/glog dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-01-28 17:25:11 -07:00
Sander Bruens	cfc3af6749	fix: update broken link to Ardan Labs (#6800)	2025-01-28 21:19:02 +00:00
Mohammed Al Sahaf	904a0fa368	reverse_proxy: re-add healthy upstreams metric (#6806) ... * reverse_proxy: re-add healthy upstreams metric Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> * lint Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com> --------- Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-01-27 14:30:54 -07:00
vnxme	d7872c3bfa	caddytls: Refactor sni matcher (#6812)	2025-01-27 11:42:09 -07:00
Kévin Dunglas	066d770409	cmd: automatically set GOMEMLIMIT (#6809) ... * feat: automatically set GOMEMLIMIT * add system support * comments * add logs	2025-01-27 09:32:24 -07:00
Matthew Holt	1115158616	caddyhttp: ResponseRecorder sets stream regardless of 1xx ... Fixes a panic where rr.stream is not true when it should be in the event of 1xx, because the buf is nil	2025-01-27 08:18:37 -07:00
vnxme	7b8f3505e3	caddytls: Fix sni_regexp matcher to obtain layer4 contexts (#6804) ... * caddytls: Fix sni_regexp matcher * caddytls: Refactor sni_regexp matcher	2025-01-25 07:45:41 -07:00
Mohammed Al Sahaf	30743c361a	chore: don't use deprecated archives.format_overrides.format (#6807) ... Signed-off-by: Mohammed Al Sahaf <msaa1990@gmail.com>	2025-01-24 16:37:16 -07:00
Marten Seemann	8d748bee71	chore: update quic-go to v0.49.0 (#6803)	2025-01-23 23:07:19 -05:00
Matthew Holt	99073eaa33	go.mod: Upgrade CertMagic to v0.21.7 ... Fixes rare edge case panics related to ARI	2025-01-17 06:54:58 -07:00
Matthew Holt	e7da3b267b	reverseproxy: Via header (#6275)	2025-01-17 06:49:01 -07:00
Omar Ramadan	9e0e5a4b4c	logging: Fix crash if logging error is not HandlerError (#6777) ... Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-01-16 10:06:29 -07:00
Matthew Holt	2c4295ee48	caddytls: Initial support for ACME profiles ... Still very experimental; only deployed to LE staging so far.	2025-01-09 13:57:00 -07:00
Kévin Dunglas	1f35a8a402	fastcgi: improve parsePHPFastCGI docs (#6779)	2025-01-09 11:54:44 -07:00
Matthew Holt	0e570e0cc7	go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance) v2.9.1	2025-01-08 07:43:27 -07:00
Arsh	e48b75843b	header: match subdirective for response matching (#6765)	2025-01-07 22:48:06 -07:00
Matt Holt	1f927d6b07	log: Only chmod if permission bits differ; make log dir (#6761) ... * log: Only chmod if permission bits differ Follow-up to #6314 and https://caddy.community/t/caddy-2-9-0-breaking-change/27576/11 * Fix test * Refactor FileWriter * Ooooh octal... right...	2025-01-07 21:51:03 -07:00
Hyeonggeun Oh	50778b5542	fix: disable h3 for unix domain socket (#6769)	2025-01-07 17:21:57 -07:00
WeidiDeng	1bd567d7ad	reverseproxy: buffer requests for fastcgi by default (#6759) ... * buffer requests for fastcgi by default * fix import cycle * fix the return value of bufferedBody * more comments about fastcgi buffering --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2025-01-02 11:18:25 -07:00
Matthew Holt	34cff4af7d	core: Only initiate exit once (should fix #6707)	2024-12-31 13:08:58 -07:00
Matthew Holt	3f3f8b3d52	go.mod: Upgrade CertMagic to v0.21.5 v2.9.0	2024-12-30 10:51:55 -07:00
Mohammed Al Sahaf	f2c17d1f3f	testing: sort force-automated hosts (#6756)	2024-12-30 05:38:29 -05:00
Francis Lavoie	afa778ae05	httpcaddyfile: Implement experimental force_automate option (#6712)	2024-12-24 08:58:40 -07:00
WeidiDeng	5ba1e06fd6	encode: try to use sendfile when compression is not used (#6749) ... * try to use sendfile when encode is enabled * change variable name * add comments * remove connect check since it's done in Write method	2024-12-20 21:37:16 +00:00
Francis Lavoie	c216cf551d	caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629) ... * caddyhttp: Allow matching Transfer-Encoding * Log transfer_encoding on the request --------- Co-authored-by: Matt Holt <mholt@users.noreply.github.com>	2024-12-20 11:16:34 -07:00
Matthew Holt	ed1c594cdb	go.mod: Upgrade ACMEz to v3; and upgrade CertMagic	2024-12-19 12:17:07 -07:00
Matthew Holt	66c80caf23	cmd: Disable go1.23 tlskyber=1 experiment ... Compilation with go 1.24 fails with it, since the experiment has ended. We'll reintroduce post quantum soon.	2024-12-19 12:17:07 -07:00
Matt Holt	47391e4ec7	Update SECURITY.md ... Clarify version support	2024-12-18 21:36:22 -07:00