0
Fork 0
mirror of https://github.com/caddyserver/caddy.git synced 2024-12-23 22:27:38 -05:00
caddy/caddytls
Matthew Holt 3a6496c268
tls: Support distributed solving of the HTTP-01 challenge
Caddy can now obtain certificates when behind load balancers and/or in
fleet/cluster configurations, without needing any extra configuration.
The only requirement is sharing the same $CADDYPATH/acme folder.
This works with the HTTP challenge, whereas before the DNS challenge
was required. This commit allows one Caddy instance to initiate the
HTTP challenge and another to complete it.

When sharing that folder, certificate management is synchronized and
coordinated, without the Caddy instances needing to know about each
other. No load balancer reconfiguration should be required, either.

Currently, this is only supported when using FileStorage for TLS
storage (which is ~99.999% of users).
2018-03-15 19:30:45 -06:00
..
storagetest Apply Apache license to all .go source files (closes #1865) 2017-09-22 23:56:58 -06:00
certificates.go tls: Synchronize renewals between Caddy instances sharing file storage 2018-02-13 13:23:09 -07:00
certificates_test.go tls: Restructure and improve certificate management 2018-02-04 00:58:27 -07:00
client.go tls: Support distributed solving of the HTTP-01 challenge 2018-03-15 19:30:45 -06:00
client_test.go Apply Apache license to all .go source files (closes #1865) 2017-09-22 23:56:58 -06:00
config.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00
config_test.go Apply Apache license to all .go source files (closes #1865) 2017-09-22 23:56:58 -06:00
crypto.go tls: Replace '*' with 'wildcard_' in OCSP staple filenames (fix #2071) 2018-03-14 21:58:59 -06:00
crypto_test.go Apply Apache license to all .go source files (closes #1865) 2017-09-22 23:56:58 -06:00
filestorage.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00
filestorage_test.go Apply Apache license to all .go source files (closes #1865) 2017-09-22 23:56:58 -06:00
filestoragesync.go tls: Ensure parent dir exists before creating lock file 2018-02-14 13:32:16 -07:00
handshake.go tls: Try empty name if no matches for getting config during handshake 2018-02-15 08:48:05 -07:00
handshake_test.go tls: Restructure and improve certificate management 2018-02-04 00:58:27 -07:00
httphandler.go tls: Support distributed solving of the HTTP-01 challenge 2018-03-15 19:30:45 -06:00
httphandler_test.go tls: Fix HTTP->HTTPS redirects and HTTP challenge when using custom port 2018-02-16 12:05:34 -07:00
maintain.go tls: Avoid nil pointer deref when parsing corrupt OCSP staple files 2018-02-21 10:53:12 -07:00
setup.go tls: Restructure and improve certificate management 2018-02-04 00:58:27 -07:00
setup_test.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00
storage.go tls: Synchronize renewals between Caddy instances sharing file storage 2018-02-13 13:23:09 -07:00
tls.go tls: Support distributed solving of the HTTP-01 challenge 2018-03-15 19:30:45 -06:00
tls_test.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00
user.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00
user_test.go tls: Initial transition to ACMEv2 and support automatic wildcard certs 2018-03-14 21:44:08 -06:00