Timo StarkandFaiyaz Rahman c18099a0af reverse_proxy with versions 3 silently ignores tls_trust_pool and verifies against the system roots (#8042) ...

* reverseproxy: build TLS client config once so HTTP/3 keeps tls_trust_pool

reuse the config built for the HTTP/1.1+2 transport and give the HTTP/3
transport a clone of it to honour the tls_trust_pool

Signed-off-by: Timo Stark <tippexs91@googlemail.com>
Co-authored-by: Faiyaz Rahman <faiyazrahman03@gmail.com>

* Adding issue reference

---------

Signed-off-by: Timo Stark <tippexs91@googlemail.com>
Co-authored-by: Faiyaz Rahman <faiyazrahman03@gmail.com>

2026-09-22 08:13:02 +10:00

..

caddyauth

caddyauth: isolate provider responses to prevent cross-provider clobbering (#7904)

2026-08-01 12:19:27 +10:00

encode

encode: flush headers immediately for server-sent events responses (#7905)

2026-08-01 00:27:28 +10:00

fileserver

chore(deps): bump cel-go and switch import to new url (#8030)

2026-09-17 04:09:23 +03:00

headers

chore: Enable modernize linter (#7519)

2026-02-26 14:01:35 -07:00

intercept

intercept: fix misleading handle_response error for extra matcher args (#7871)

2026-07-12 09:16:34 +10:00

logging

logging: log_append Early option, Supports {http.response.body} (#7368)

2025-12-16 23:42:42 -05:00

map

chore: Use slices package where possible (#6585)

2024-09-25 14:30:56 -06:00

proxyprotocol

docs: expand proxy protocol docs (#6620)

2024-10-10 16:21:26 -04:00

push

chore: Dumb prealloc lint fix (#7430)

2026-01-13 14:13:43 -05:00

requestbody

caddyhttp: mitigate slowloris via idle read/write deadlines (#7913)

2026-08-21 21:17:26 -06:00

reverseproxy

reverse_proxy with versions 3 silently ignores tls_trust_pool and verifies against the system roots (#8042)

2026-09-22 08:13:02 +10:00

rewrite

Merge commit from fork

2026-09-14 12:50:44 -06:00

standard

caddyhttp: mitigate slowloris via idle read/write deadlines (#7913)

2026-08-21 21:17:26 -06:00

templates

fileserver: speed up directory browsing for large directories (#7903)

2026-08-01 00:38:04 +10:00

timeouts

caddyhttp: mitigate slowloris via idle read/write deadlines (#7913)

2026-08-21 21:17:26 -06:00

tracing

tracing: fix BatchSpanProcessor goroutine leak on config reload (#7826)

2026-06-18 11:42:58 -06:00

app_test.go

caddyhttp: log recovered handler panics at ERROR level (#7924)

2026-08-10 02:18:17 -04:00

app.go

caddyhttp: mitigate slowloris via idle read/write deadlines (#7913)

2026-08-21 21:17:26 -06:00

autohttps_test.go

tls: add alpn to managed HTTPS records (#7653)

2026-05-10 13:10:29 +10:00

autohttps.go

tls: add alpn to managed HTTPS records (#7653)

2026-05-10 13:10:29 +10:00

caddyhttp_test.go

caddyhttp: Add test cases to corpus (#6374)

2024-06-04 14:23:55 -06:00

caddyhttp.go

caddyhttp: Add MatchWithError to replace SetVar hack (#6596)

2024-11-04 23:18:50 +00:00

celmatcher_test.go

caddyhttp: add URL pattern request matcher (#7787)

2026-06-22 10:25:43 -06:00

celmatcher.go

chore(deps): bump cel-go and switch import to new url (#8030)

2026-09-17 04:09:23 +03:00

errors.go

use math/rand/v2 instead of math/rand (#7413)

2026-02-11 09:15:51 -07:00

http2listener.go

chore: clean up wording and typo fixes (#7745)

2026-05-20 16:36:30 +10:00

httpredirectlistener.go

chore: clean up wording and typo fixes (#7745)

2026-05-20 16:36:30 +10:00

idletimeout_test.go

caddyhttp: mitigate slowloris via idle read/write deadlines (#7913)

2026-08-21 21:17:26 -06:00

idletimeout.go

caddyhttp: mitigate slowloris via idle read/write deadlines (#7913)

2026-08-21 21:17:26 -06:00

invoke.go

caddyhttp: Implement named routes, invoke directive (#5107)

2023-05-16 15:27:52 +00:00

ip_matchers.go

chore(deps): bump cel-go and switch import to new url (#8030)

2026-09-17 04:09:23 +03:00

ip_range.go

Move PrivateRangesCIDR() back: add a pass-through function (#6514)

2024-08-12 05:47:05 -04:00

logging.go

core: custom slog handlers for modules (log contextual data) (#7346)

2025-11-12 13:29:47 -07:00

marshalers.go

admin: Redact sensitive request headers in API logs (#7578)

2026-04-17 14:56:42 -06:00

matchers_test.go

caddyhttp: fix path_regexp (MatchPathRE) Windows backslash bypass (#7858)

2026-07-11 08:37:44 +10:00

matchers.go

chore(deps): bump cel-go and switch import to new url (#8030)

2026-09-17 04:09:23 +03:00

metrics_test.go

metrics: Implement pushing via OLTP (#7664)

2026-04-25 06:52:08 -04:00

metrics.go

metrics: Implement pushing via OLTP (#7664)

2026-04-25 06:52:08 -04:00

replacer_test.go

caddyhttp: allocate the request UUID lazily instead of on every request (#7936)

2026-08-11 21:21:33 +10:00

replacer.go

caddyhttp: allocate the request UUID lazily instead of on every request (#7936)

2026-08-11 21:21:33 +10:00

responsematchers_test.go

reverseproxy: Add handle_response blocks to reverse_proxy (#3710) (#4021)

2021-05-02 12:39:06 -06:00

responsematchers.go

caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)

2024-12-20 11:16:34 -07:00

responsewriter_test.go

caddyhttp: Address some Go 1.20 features (#6252)

2024-04-24 00:05:57 +00:00

responsewriter.go

caddyhttp: ResponseRecorder sets stream regardless of 1xx

2025-01-27 08:18:37 -07:00

routes.go

chore: Fix golangci-lint 2.12.1 findings (#7690)

2026-05-07 03:40:26 -04:00

server_test.go

caddyhttp: surface write timeout errors in access log (#7945)

2026-09-04 16:56:07 -04:00

server.go

caddyhttp: demote Alt-Svc ErrNoAltSvcPort to debug level (#8000)

2026-09-08 13:26:18 +10:00

staticerror.go

caddyhttp: run error (msg) through replacer (#6536)

2024-08-22 11:32:44 -06:00

staticresp_test.go

caddyhttp: only replace known placeholders in respond headers (#8014)

2026-09-13 12:08:21 +10:00

staticresp.go

caddyhttp: only replace known placeholders in respond headers (#8014)

2026-09-13 12:08:21 +10:00

subroute.go

reverseproxy: Enable changing only the status code (close #2920)

2020-06-04 12:06:38 -06:00

urlpatternmatcher_test.go

caddyhttp: fix url_pattern authorization bypass via encoded-slash traversal (#7941)

2026-08-15 10:38:20 -06:00

urlpatternmatcher.go

chore(deps): bump cel-go and switch import to new url (#8030)

2026-09-17 04:09:23 +03:00

vars_test.go

vars: Add matcher placeholder handling tests (#7640)

2026-04-10 16:27:52 -06:00

vars.go

chore(deps): bump cel-go and switch import to new url (#8030)

2026-09-17 04:09:23 +03:00