caddy/caddy/https
W-Mark Kubacki 69c2d78f69 Support configuring less restrictive TLS client auth requirements
Caddyfile parameter "clients" of "tls" henceforth accepts a special
first modifier. It is one of, and effects:

 * request         = tls.RequestClientCert
 * require         = tls.RequireAnyClientCert
 * verify_if_given = tls.VerifyClientCertIfGiven
 * (none)          = tls.RequireAndVerifyClientCert

The use-case for this is as follows: A middleware would serve items to the
public, but if a certificate were given the middleware would permit file
manipulation.

And, in a different plugin such as a forum or blog, not verifying a client
cert would be nice for registration: said blog would subsequently only
compare the SPKI of a client certificate.
2016-04-15 22:21:55 +02:00
..
certificates.go https: Minor refactoring and some new tests 2016-02-18 20:33:15 -07:00
certificates_test.go https: Minor refactoring and some new tests 2016-02-18 20:33:15 -07:00
client.go Support ECC certificates 2016-03-03 00:52:07 +00:00
crypto.go gofmt! 2016-03-17 16:43:50 -06:00
crypto_test.go Faster tests 2016-04-03 20:06:21 +02:00
handler.go tls: Some bug fixes, basic rate limiting, max_certs setting 2016-02-11 13:48:52 -07:00
handler_test.go Major refactor of all HTTPS/TLS/ACME code 2016-02-11 00:06:05 -07:00
handshake.go https: Minor refactoring and some new tests 2016-02-18 20:33:15 -07:00
handshake_test.go https: Minor refactoring and some new tests 2016-02-18 20:33:15 -07:00
https.go Fix for #721 2016-04-04 23:59:40 +00:00
https_test.go correct unused assignments 2016-03-26 21:05:19 +00:00
maintain.go https: Refuse start only if renewal fails on expired cert (closes #642) 2016-03-02 11:34:39 -07:00
setup.go Support configuring less restrictive TLS client auth requirements 2016-04-15 22:21:55 +02:00
setup_test.go Support configuring less restrictive TLS client auth requirements 2016-04-15 22:21:55 +02:00
storage.go Major refactor of all HTTPS/TLS/ACME code 2016-02-11 00:06:05 -07:00
storage_test.go Major refactor of all HTTPS/TLS/ACME code 2016-02-11 00:06:05 -07:00
user.go Support ECC certificates 2016-03-03 00:52:07 +00:00
user_test.go Support ECC certificates 2016-03-03 00:52:07 +00:00