Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix #2502: tls self_signed not working correctly #2531

Closed
wants to merge 2 commits into from

Conversation

abiosoft
Copy link

Fixes #2502: tls self_signed not working correctly.

Having compared the code changes with older Caddy versions, I am not sure exactly what changed.
However, I think this is supposed to be the expected behaviour.

Previously #2511.

@thattomperson
Copy link

From godoc.org/crypto/tls

TLS 1.3 is available only on an opt-in basis in Go 1.12. To enable it, set the GODEBUG environment variable (comma-separated key=value options) such that it includes "tls13=1". To enable it from within the process, set the environment variable before any use of TLS:

And it looks like Appveyor is using golang v1.11

@elcore
Copy link
Collaborator

elcore commented Mar 19, 2019

@thattomperson

TLS 1.3 is available only on an opt-in basis in Go 1.12. To enable it, set the GODEBUG environment variable (comma-separated key=value options) such that it includes "tls13=1". To enable it from within the process, set the environment variable before any use of TLS

Caddy does that for you

https://github.com/mholt/caddy/blob/72d0debde6bf01b5fdce0a4f3dc2b35cba28241a/caddytls/setup.go#L37-L39

And it looks like Appveyor is using golang v1.11

We know, we are waiting for an update...

Copy link
Member

@mholt mholt left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I do not think this is the right approach... if the hostname is empty (e.g. "catch-all" address like :2015), we need to serve for ALL addresses, not just local ones.

@mholt mholt closed this Jul 18, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Tls self_signed - Not working correctly since a few versions
4 participants