Timo StarkandFaiyaz Rahman c18099a0af reverse_proxy with versions 3 silently ignores tls_trust_pool and verifies against the system roots (#8042) ...

* reverseproxy: build TLS client config once so HTTP/3 keeps tls_trust_pool

reuse the config built for the HTTP/1.1+2 transport and give the HTTP/3
transport a clone of it to honour the tls_trust_pool

Signed-off-by: Timo Stark <tippexs91@googlemail.com>
Co-authored-by: Faiyaz Rahman <faiyazrahman03@gmail.com>

* Adding issue reference

---------

Signed-off-by: Timo Stark <tippexs91@googlemail.com>
Co-authored-by: Faiyaz Rahman <faiyazrahman03@gmail.com>

2026-09-22 08:13:02 +10:00

..

fastcgi

fastcgi: fix HTTPoxy vulnerability (#7934)

2026-08-19 13:07:24 +10:00

forwardauth

forwardauth: error on duplicate uri subdirective (#7814)

2026-06-10 23:31:04 -04:00

active_health_test.go

reverseproxy: replace only known placeholders in health check body (#8003)

2026-09-09 08:48:08 -06:00

addresses_test.go

reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)

2023-08-05 23:30:02 +02:00

addresses.go

core: Implement socket activation listeners (#6573)

2024-09-30 10:55:03 -06:00

admin_test.go

reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539)

2026-03-04 15:05:26 -05:00

admin.go

reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539)

2026-03-04 15:05:26 -05:00

ascii_test.go

filesystem: Globally declared filesystems, fs directive (#5833)

2024-01-13 20:12:43 +00:00

ascii.go

reverseproxy: Sync up handleUpgradeResponse with stdlib (#4664)

2022-04-11 12:49:56 -06:00

buffering_test.go

reverseproxy: more comments about buffering and add new tests (#6778)

2025-03-07 11:22:43 -07:00

caddyfile.go

reverseproxy: fix misleading handle_response error for extra matcher args (#7869)

2026-07-10 05:40:23 +00:00

client_disconnect_test.go

reverseproxy: log status 499 instead of 0 when client disconnects (#7827)

2026-06-18 13:31:02 +10:00

command.go

cmd: prevent commas in header values from being split (#7268)

2025-09-22 21:12:06 -06:00

copyresponse.go

reverseproxy: Fix double headers in response handlers (#4847)

2022-06-22 15:10:14 -04:00

dynamic_upstreams_test.go

reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539)

2026-03-04 15:05:26 -05:00

headers_test.go

chore: replace interface{} with any for modernization (#7571)

2026-04-11 19:53:12 +03:00

healthchecks.go

reverseproxy: replace only known placeholders in health check body (#8003)

2026-09-09 08:48:08 -06:00

hopheaders_test.go

Merge commit from fork

2026-06-12 12:39:01 -06:00

hosts.go

reverseproxy: isolate active health-check state per distinct check config (#7916)

2026-08-12 15:20:15 +10:00

httptransport_test.go

reverse_proxy with versions 3 silently ignores tls_trust_pool and verifies against the system roots (#8042)

2026-09-22 08:13:02 +10:00

httptransport.go

reverse_proxy with versions 3 silently ignores tls_trust_pool and verifies against the system roots (#8042)

2026-09-22 08:13:02 +10:00

metrics.go

reverseproxy: ignore duplicate collector registration error (#6820)

2025-02-04 10:55:30 +03:00

passive_health_test.go

reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539)

2026-03-04 15:05:26 -05:00

prepare_request_bench_test.go

reverseproxy: reduce allocation/CPU overhead in request hot paths (#7925)

2026-08-10 15:49:55 +10:00

retries_test.go

reverseproxy: further prevent body closes from dial errors (#7715)

2026-05-12 12:05:50 -06:00

reverseproxy.go

reverseproxy: reduce allocation/CPU overhead in request hot paths (#7925)

2026-08-10 15:49:55 +10:00

selectionpolicies_test.go

fileserver: speed up directory browsing for large directories (#7903)

2026-08-01 00:38:04 +10:00

selectionpolicies.go

reverseproxy: fix broken reservoir sampling in random_choose policy (#7873)

2026-07-12 09:25:31 +10:00

streaming_test.go

reverseproxy: propagate TCP half-close on upgraded streams (#8027)

2026-09-16 10:10:24 +00:00

streaming.go

reverseproxy: propagate TCP half-close on upgraded streams (#8027)

2026-09-16 10:10:24 +00:00

upstreams_bench_test.go

reverseproxy: preallocate upstream slices with known sizes (#7926)

2026-08-10 15:51:50 +10:00

upstreams_test.go

chore: upgrade .golangci.yml and workflow to v2 (#6924)

2025-06-03 02:24:32 +03:00

upstreams.go

reverseproxy: preallocate upstream slices with known sizes (#7926)

2026-08-10 15:51:50 +10:00