Harsh Patel d7834676aa tls: add system and combined CA pool modules (#7406) ...

* feat: add system and combined CA pool modules

* fix: combining pools using `CertificateProvider`

* fix: lint issue

* chore: caddyfiletests
* doing it for first time, so not sure if its right.

* fix: use `x509` native addCert

* chore: explicit err handling

* Apply suggestion from @mohammed90

---------

Co-authored-by: Mohammed Al Sahaf <mohammed@caffeinatedwonders.com>

2026-04-06 01:13:34 +03:00

..

distributedstek

ci: use gci linter (#5708)

2023-08-14 09:41:15 -06:00

standardstek

all: Recover from panics in goroutines

2020-05-12 11:36:20 -06:00

acmeissuer.go

tls: expand placeholders in dns_challenge override_domain (#7609)

2026-03-31 05:46:32 +00:00

automation_test.go

caddytls: Avoid default issuers for implicit tailscale policies (#7577)

2026-03-20 09:36:03 -06:00

automation.go

caddytls: Avoid default issuers for implicit tailscale policies (#7577)

2026-03-20 09:36:03 -06:00

capools_test.go

tls: add system and combined CA pool modules (#7406)

2026-04-06 01:13:34 +03:00

capools.go

tls: add system and combined CA pool modules (#7406)

2026-04-06 01:13:34 +03:00

certmanagers.go

chore: Add nolints to work around haywire linters (#7493)

2026-02-17 16:52:54 -07:00

certselection.go

Use slices.Contains to simplify code (#7039)

2025-05-31 12:03:06 -06:00

connpolicy_test.go

caddytls: Fix TrustedCACerts backwards compatibility (#6889)

2025-03-10 12:50:47 -06:00

connpolicy.go

Fix lint errors

2026-03-11 13:33:59 -06:00

ech.go

caddytls: Ensure key list always gets set (fix #7555)

2026-03-16 16:21:47 -06:00

fileloader.go

caddytls: Give a better error message when given encrypted private keys (#6591)

2024-09-25 06:00:48 -06:00

folderloader.go

Fix lint errors

2026-03-11 13:33:59 -06:00

internalissuer_test.go

caddypki: Add support for multiple intermediates in signing chain (#7057)

2025-12-03 11:30:00 -07:00

internalissuer.go

caddypki: Add support for multiple intermediates in signing chain (#7057)

2025-12-03 11:30:00 -07:00

leaffileloader_test.go

caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)

2024-03-05 14:55:37 -07:00

leaffileloader.go

caddytls: wire up client_auth leaf verifier Caddyfile (#6772)

2025-06-09 08:18:36 -06:00

leaffolderloader_test.go

caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)

2024-03-05 14:55:37 -07:00

leaffolderloader.go

caddytls: correct documentation of LeafFolderLoader (#7327)

2025-11-01 18:29:55 +03:00

leafpemloader_test.go

caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)

2024-03-05 14:55:37 -07:00

leafpemloader.go

caddytls: wire up client_auth leaf verifier Caddyfile (#6772)

2025-06-09 08:18:36 -06:00

leafstorageloader.go

caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050)

2024-03-05 14:55:37 -07:00

matchers_test.go

caddytls: Add sni_regexp matcher (#6569)

2024-09-11 20:51:59 -06:00

matchers.go

caddytls: Refactor sni matcher (#6812)

2025-01-27 11:42:09 -07:00

ondemand.go

caddyhttp: Add MatchWithError to replace SetVar hack (#6596)

2024-11-04 23:18:50 +00:00

pemloader.go

tls: accept placeholders in string values of certificate loaders (#5963)

2023-12-04 09:23:15 -07:00

sessiontickets.go

all: Recover from panics in goroutines

2020-05-12 11:36:20 -06:00

storageloader.go

caddytls: Give a better error message when given encrypted private keys (#6591)

2024-09-25 06:00:48 -06:00

tls.go

tls: Add tls_resolvers global option for DNS challenge configuration (#7297)

2026-03-01 15:32:04 -05:00

values.go

Fix typo in TLS group x25519mlkem768

2025-03-03 10:26:42 -07:00

zerosslissuer.go

chore: Add nolints to work around haywire linters (#7493)

2026-02-17 16:52:54 -07:00