9 commits

Author	SHA1	Message	Date
Matthew Holt	a1c41210d3	caddypki: Minor tweak, don't use context pointer	2021-12-13 16:13:38 -07:00
Francis Lavoie	c04d24cafa	pki: Avoid provisioning the local CA when not necessary (#4463) ... * pki: Avoid provisioning the `local` CA when not necessary * pki: Refactor CA loading to keep the logic in the PKI app	2021-12-13 12:25:35 -07:00
Matthew Holt	501da21f20	General minor improvements to docs	2021-09-24 18:31:01 -06:00
Matthew Holt	bf50d7010a	acmeserver: Support custom CAs from Caddyfile ... The HTTP Caddyfile adapter can now configure the PKI app, and the acme_server directive can now be used to specify a custom CA used for issuing certificates. More customization options can follow later as needed.	2021-02-02 17:23:52 -07:00
Matt Holt	184e8e9f71	pki: Embedded ACME server (#3198) ... * pki: Initial commit of embedded ACME server (#3021) * reverseproxy: Support auto-managed TLS client certificates (#3021) * A little cleanup after today's review session	2020-05-05 12:35:32 -06:00
Matthew Holt	244b839f98	pki: Add trust subcommand to install root cert (closes #3204)	2020-03-31 17:56:36 -06:00
Matthew Holt	acf4dde1dd	pki: Don't treat cert installation failure as error ... See https://caddy.community/t/fail-to-start-caddy2-not-nss-security-databases-found/7223?u=matt	2020-03-14 15:20:04 -06:00
Matthew Holt	6cbd93736f	Minor tweaks	2020-03-13 13:04:10 -06:00
Matt Holt	5a19db5dc2	v2: Implement 'pki' app powered by Smallstep for localhost certificates (#3125) ... * pki: Initial commit of PKI app (WIP) (see #2502 and #3021) * pki: Ability to use root/intermediates, and sign with root * pki: Fix benign misnamings left over from copy+paste * pki: Only install root if not already trusted * Make HTTPS port the default; all names use auto-HTTPS; bug fixes * Fix build - what happened to our CI tests?? * Fix go.mod	2020-03-13 11:06:08 -06:00