34 Commits

Author SHA256 Message Date
a013e3eb0a Accepting request 1301068 from home:jfkw:branches:server:http
- Update to version 2.10.2:
  * caddyfile: Fix importing nested tokens for `{block}` (#7189)
  * httpcaddyfile: Fix `acme_dns` regression (#7199)
  * http: Make logger first, before TLS provisioning (#7198)

- Update to version 2.10.1:
  * go.mod: Upgrade CertMagic to v0.24.0
  * caddyhttp: use the new http.Protocols to handle h1, h2 and h2c requests (#6961)
  * fileserver: set Range header for precompressed static files to force Content Length header to appear (#7042)
  * fileserver: Add a few doc lines about Etag file content (#7173)
  * ci: set proper build tags in golangci and minor cleanup (#7183)
  * reverse_proxy: use the new KeepAliveConfig to set probe interval (#7157)
  * http: clean up listeners if some of the listeners fail to bind (#7176)
  * http: disable keepalive when KeepAliveInterval is negative (#7158)
  * use a more modern writing style to simplify code (#7182)
  * caddyhttp: refactor to use reflect.TypeFor (#7187)
  * chore: bump Go to v1.25 (#7184)
  * caddyhttp: Free up quic listener when stopping (#7177)
  * caddytls: fix regression in external certificate manager support (#7179)
  * chore: fix inconsistent function name in comment (#7174)
  * bcrypt: wrong cost flag name (#7168)
  * bcrypt: add cost parameter to hash-password (#7149)
  * cmd: Allow `caddy adapt` to read from stdin (#7163)
  * build(deps): bump the all-updates group across 1 directory with 17 updates (#7155)
  * caddytls: Improve ECH error logging (close #7152)
  * httpcaddyfile: Fix generated config related to ACME global options
  * core: Use KeepAliveConfig to pass keepalive_interval to listener's accepted sockets (#7151)
- Packaging improvements:
  * Update to BuildRequires: golang(API) >= 1.25 matching go.mod

OBS-URL: https://build.opensuse.org/request/show/1301068
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=60
2025-08-23 13:18:35 +00:00
116baa5a1a Accepting request 1270914 from home:jfkw:branches:server:http
- Update to version 2.10.0:
  * caddytls: Allow missing ECH meta file
  * caddytls: Prefer managed wildcard certs over individual subdomain certs (#6959)
- Packaging improvements:
  * Update to BuildRequires: golang(API) >= 1.24 matching go.mod
  * Use BuildRequires: two-digit golang(API) >= 1.x rather than
    three digit 1.x.y default from go mod init defaults. Currently
    the Provides: golang(API) expression is major version
    (two-digit) only. We ship new go releases sufficiently quickly
    that this has not often been an issue. Consideration is being
    given to the best way to handle the new three digit go.mod
    required minimum Go version.

OBS-URL: https://build.opensuse.org/request/show/1270914
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=58
2025-04-22 07:36:14 +00:00
96ee5e2f48 Accepting request 1249584 from home:etorres:branches:server:http
Update to version 2.9.1

OBS-URL: https://build.opensuse.org/request/show/1249584
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=56
2025-03-03 08:19:35 +00:00
a8e219703d Accepting request 1181763 from home:avicenzi:branches:server:http
fix caddy version

OBS-URL: https://build.opensuse.org/request/show/1181763
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=54
2024-06-19 18:33:02 +00:00
0c5893515f Accepting request 1180869 from home:iDesmI:branches:server:http
- Add OBS manual service download_files
- Source Caddyfile and index.html from upstream
- Remove part of inaccurate description
- Package shell completion separately
- Generate shell completion during build
- Include manpages
- Remove compatibility with SLE-12
- Source buildable-artifact tar from github to embed version
  information (https://github.com/golang/go/issues/29228)
- Check binary with version subcommand
- Raise golang(API) required version

OBS-URL: https://build.opensuse.org/request/show/1180869
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=52
2024-06-14 11:27:48 +00:00
d17cecbf6a Accepting request 1178167 from home:jfkw:branches:server:http
- Update to version 2.8.4:
  * cmd: fix regression in auto-detect of Caddyfile (#6362)
  * Tag v2.8.3 was mistakenly made on the v2.8.2 commit and is skipped

- Update to version 2.8.2:
  * cmd: fix auto-detetction of .caddyfile extension (#6356)
  * caddyhttp: properly sanitize requests for root path (#6360)
  * caddytls: Implement certmagic.RenewalInfoGetter
  * build(deps): bump golangci/golangci-lint-action from 5 to 6 (#6361)

OBS-URL: https://build.opensuse.org/request/show/1178167
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=50
2024-06-03 02:10:08 +00:00
57ed12c022 Accepting request 1177929 from home:avicenzi:branches:server:http
Add CVEs

OBS-URL: https://build.opensuse.org/request/show/1177929
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=49
2024-05-31 12:34:23 +00:00
b56a8f15a9 Accepting request 1177785 from home:jfkw:branches:server:http
- Update to version 2.8.1:
- Update to version 2.8.0:
- Packaging improvements:
  * Update to BuildRequires: golang(API) >= 1.21 matching go.mod

OBS-URL: https://build.opensuse.org/request/show/1177785
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=48
2024-05-31 12:27:45 +00:00
abfde7e523 Accepting request 1163784 from home:bmwiedemann:branches:server:http
Fix --no-check build

OBS-URL: https://build.opensuse.org/request/show/1163784
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=46
2024-04-01 13:01:38 +00:00
06f871dad3 Accepting request 1144628 from home:jfkw:branches:server:http
- Packaging improvements:
  * Remove define github project name components no longer needed
  * Remove define gname and uname for user and group creation, use
    package name macro with identical value
  * Drop BuildRequires: golang-packaging. The original macros for
    file movements into GOPATH are obsolete with Go modules. Macro
    go_nostrip is no longer needed with current binutils and Go.
  * Use autosetup -a 1 to unpack source and vendored dependencies
  * Drop export CGO_ENABLED="0". Use the default unless there is a
    defined requirement or benefit.
  * Build PIE with pattern that may become recommended procedure:
    %%ifnarch ppc64 GOFLAGS="-buildmode=pie" %%endif go build
    A go toolchain buildmode default config would be preferable
    but none exist at this time.
  * Drop mod=vendor, go1.14+ will detect vendor dir and auto-enable
  * Remove ldflags -s (Omit symbol table and debug info) and -w
    (Omit DWARF symbol table). This information is used to produce
    separate debuginfo packages and binaries are stripped for
    reduced size by GNU strip during RPM build.
  * Add basic %check to execute binary --help

OBS-URL: https://build.opensuse.org/request/show/1144628
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=44
2024-02-06 15:10:28 +00:00
bd21d8f22e Accepting request 1144504 from home:dimstar:Factory
- Drop deprecated go_provides macro: even though it tries to guard
  on suse_version <= 1110, it has entirely disarms the dep scanner.
- Remove the manual user/group provides: the package uses
  sysusers.d; the auto-provides were not working due to the broken
  go_provides.

OBS-URL: https://build.opensuse.org/request/show/1144504
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=43
2024-02-06 08:54:28 +00:00
669ba9c247 Accepting request 1144293 from home:avicenzi:branches:server:http
RPM 4.19 updates

OBS-URL: https://build.opensuse.org/request/show/1144293
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=41
2024-02-05 14:30:55 +00:00
c9a160712d Accepting request 1132018 from home:jfkw:branches:server:http
- Update to version 2.7.6:
  * caddytls: Sync distributed storage cleaning (#5940)
  * caddytls: Context to DecisionFunc (#5923)
  * tls: accept placeholders in string values of certificate loaders (#5963)
  * templates: Offically make templates extensible (#5939)
  * http2 uses new round-robin scheduler (#5946)
  * panic when reading from backend failed to propagate stream error (#5952)
  * chore: Bump otel to v1.21.0. (#5949)
  * httpredirectlistener: Only set read limit for when request is HTTP (#5917)
  * fileserver: Add .m4v for browse template icon
  * Revert "caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)" (#5924)
  * go.mod: update quic-go version to v0.40.0 (#5922)
  * update quic-go to v0.39.3 (#5918)
  * chore: Fix usage pool comment (#5916)
  * test: acmeserver: add smoke test for the ACME server directory (#5914)
  * Upgrade acmeserver to github.com/go-chi/chi/v5 (#5913)
  * caddyhttp: Adjust `scheme` placeholder docs (#5910)
  * go.mod: Upgrade quic-go to v0.39.1
  * go.mod: CVE-2023-45142 Update opentelemetry (#5908)
  * templates: Delete headers on `httpError` to reset to clean slate (#5905)
  * httpcaddyfile: Remove port from logger names (#5881)
  * core: Apply SO_REUSEPORT to UDP sockets (#5725)
  * caddyhttp: Use sync.Pool to reduce lengthReader allocations (#5848)
  * cmd: Add newline character to version string in CLI output (#5895)
  * core: quic listener will manage the underlying socket by itself (#5749)
  * templates: Clarify `include` args docs, add `.ClientIP` (#5898)
  * httpcaddyfile: Fix TLS automation policy merging with get_certificate (#5896)
  * cmd: upgrade: resolve symlink of the executable (#5891)
  * caddyfile: Fix variadic placeholder false positive when token contains `:` (#5883)

OBS-URL: https://build.opensuse.org/request/show/1132018
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=39
2023-12-08 12:47:48 +00:00
d327e5dfc2 Accepting request 1117725 from home:jfkw:branches:server:http
- Update to version 2.7.5:
  * admin: Respond with 4xx on non-existing config path (#5870)
  * ci: Force the Go version for govulncheck (#5879)
  * fileserver: Set canonical URL on browse template (#5867)
  * tls: Add X25519Kyber768Draft00 PQ "curve" behind build tag (#5852)
  * reverseproxy: Add more debug logs (#5793)
  * reverseproxy: Fix `least_conn` policy regression (#5862)
  * reverseproxy: Add logging for dynamic A upstreams (#5857)
  * reverseproxy: Replace health header placeholders (#5861)
  * httpcaddyfile: Sort TLS SNI matcher for deterministic JSON output (#5860)
  * cmd: Fix exiting with custom status code, add `caddy -v` (#5874)
  * reverseproxy: fix parsing Caddyfile fails for unlimited request/response buffers (#5828)
  * reverseproxy: Fix retries on "upstreams unavailable" error (#5841)
  * httpcaddyfile: Enable TLS for catch-all site if `tls` directive is specified (#5808)
  * encode: Add `application/wasm*` to the default content types (#5869)
  * fileserver: Add command shortcuts `-l` and `-a` (#5854)
  * go.mod: Upgrade dependencies incl. x/net/http
  * templates: Add dummy `RemoteAddr` to `httpInclude` request, proxy compatibility (#5845)
  * reverseproxy: Allow fallthrough for response handlers without routes (#5780)
  * fix: caddytest.AssertResponseCode error message (#5853)
  * build(deps): bump goreleaser/goreleaser-action from 4 to 5 (#5847)
  * build(deps): bump actions/checkout from 3 to 4 (#5846)
  * caddyhttp: Use LimitedReader for HTTPRedirectListener
  * fileserver: browse template SVG icons and UI tweaks (#5812)
  * reverseproxy: fix nil pointer dereference in AUpstreams.GetUpstreams (#5811)
  * httpcaddyfile: fix placeholder shorthands in named routes (#5791)
  * cmd: Prevent overwriting existing env vars with `--envfile` (#5803)
  * ci: Run govulncheck (#5790)
  * logging: query filter for array of strings (#5779)
  * logging: Clone array on log filters, prevent side-effects (#5786)

OBS-URL: https://build.opensuse.org/request/show/1117725
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=37
2023-10-13 22:25:44 +00:00
b875886c74 Accepting request 1113034 from home:avicenzi:branches:server:http
Switch to sysusers

OBS-URL: https://build.opensuse.org/request/show/1113034
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=35
2023-09-22 14:48:31 +00:00
eefb04d8ea Accepting request 1112835 from home:avicenzi:branches:server:http
Fix build

OBS-URL: https://build.opensuse.org/request/show/1112835
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=34
2023-09-21 15:04:52 +00:00
d431aac43d Accepting request 1104490 from home:jfkw:branches:server:http
- Update to version 2.7.4:
  * go.mod: Upgrade CertMagic and quic-go
  * reverseproxy: Always return new upstreams (fix #5736) (#5752)
  * ci: use gci linter (#5708)
  * fileserver: Slightly more fitting icons
  * cmd: Require config for caddy validate (fix #5612) (#5614)
  * Fix tests
  * caddytls: Update docs for on-demand config
  * fileserver: Don't repeat error for invalid method inside error context (#5705)
  * ci: Update to Go 1.21 (#5719)
  * ci: Add riscv64 (64-bit RISC-V) to goreleaser (#5720)
  * go.mod: Upgrade golang.org/x/net to 0.14.0 (#5718)
  * ci: Use gofumpt to format code (#5707)
  * templates: Fix httpInclude (fix #5698)

- Use _service mode manual as better alias name than disabled
  * osc reports service mode disabled as obsolete

OBS-URL: https://build.opensuse.org/request/show/1104490
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=32
2023-08-17 23:03:49 +00:00
a06fd05c88 Accepting request 1102520 from home:jfkw:branches:server:http
- Update to version 2.7.3:
  * go.mod: Upgrade to quic-go v0.37.3
  * cmd: Split unix sockets for admin endpoint addresses (#5696)
  * reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)
  * caddyfile: check that matched key is not a substring of the replacement key (#5685)
  * chore: use `--clean` instead of `--rm-dist` for goreleaser (#5691)
  * go.mod: Upgrade quic-go to v0.37.2 (fix  #5680)
  * fileserver: browse: Render SVG images in grid

OBS-URL: https://build.opensuse.org/request/show/1102520
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=30
2023-08-06 01:51:12 +00:00
6ef2bb1d10 Accepting request 1102430 from home:elimat:branches:server:http
- Update to version 2.7.2:
  * reverseproxy: Fix hijack ordering which broke websockets (#5679)
  * httpcaddyfile: Fix `string does not match ~[]E` error (#5675)
  * encode: Fix infinite recursion (#5672)
  * caddyhttp: Make use of `http.ResponseController` (#5654)
  * go.mod: Upgrade dependencies esp. smallstep/certificates
  * core: Allow loopback hosts for admin endpoint (fix #5650) (#5664)
  * httpcaddyfile: Allow `hostnames` & logger name overrides for log directive (#5643)
  * reverseproxy: Connection termination cleanup (#5663)
  * go.mod: Use quic-go 0.37.1
  * reverseproxy: Export ipVersions type (#5648)
  * go.mod: Use latest CertMagic (v0.19.1)
  * caddyhttp: Preserve original error (fix #5652)
  * fileserver: add lazy image loading (#5646)
  * go.mod: Update quic-go to v0.37.0, bump to Go 1.20 minimum (#5644)
  * core: Refine mutex during reloads (fix #5628) (#5645)
  * go.mod: update quic-go to v0.36.2 (#5636)
  * fileserver: Tweak grid view of browse template
  * fileserver: add `export-template` sub-command to `file-server` (#5630)
  * caddyfile: Fix comparing if two tokens are on the same line (#5626)
  * caddytls: Reuse certificate cache through reloads (#5623)
  * Minor tweaks to security.md
  * reverseproxy: Pointer receiver
  * caddyhttp: Trim dot/space only on Windows (fix #5613)
  * update quic-go to v0.36.1 (#5611)
  * caddyconfig: Specify config adapter for HTTP loader (close #5607)
  * core: Embed net.UDPConn to gain optimizations (#5606)
  * chore: remove deprecated property `rlcp` in goreleaser config (#5608)
  * core: Skip `chmod` for abstract unix sockets (#5596)
  * core: Add optional unix socket file permissions (#4741)
  * reverseproxy: Honor `tls_except_port` for active health checks (#5591)
  * Appease linter
  * Fix compile on Windows, hopefully
  * core: Properly preserve unix sockets (fix  #5568)
  * go.mod: Upgrade CertMagic for hotfix
  * go.mod: Upgrade some dependencies
  * chore: upgrade otel (#5586)
  * go.mod: Update quic-go to v0.36.0 (#5584)
  * reverseproxy: weighted_round_robin load balancing policy (#5579)
  * reverseproxy: Experimental streaming timeouts (#5567)
  * chore: remove refs of deprecated io/ioutil (#5576)
  * headers: Allow `>` to defer shortcut for replacements (#5574)
  * caddyhttp: Support custom network for HTTP/3 (#5573)
  * reverseproxy: Fix parsing of source IP in case it's an ipv6 address (#5569)
  * fileserver: browse: Better grid layout (#5564)
  * caddytls: Clarify some JSON config docs
  * cmd: Implement storage import/export (#5532)
  * go.mod: Upgrade quic-go to 0.35.1
  * update quic-go to v0.35.0 (#5560)
  * templates: Add `readFile` action that does not evaluate templates (#5553)
  * caddyfile: Track import name instead of modifying filename (#5540)
  * core: Use SO_REUSEPORT_LB on FreeBSD (#5554)
  * caddyfile: Do not replace import tokens if they are part of a snippet (#5539)
  * fileserver: Don't set Etag if mtime is 0 or 1 (close #5548) (#5550)
  * fileserver: browse: minor tweaks for grid view, dark mode (#5545)
  * fileserver: Only set Etag if not already set (fix #5546) (#5547)
  * fileserver: Fix file browser breadcrumb font (#5543)
  * caddyhttp: Fix h3 shutdown (#5541)
  * fileserver: More filetypes for browse icons
  * fileserver: Fix file browser footer in grid mode (#5536)
  * cmd: Avoid spammy log messages (fix #5538)
  * httpcaddyfile: Sort Caddyfile slice
  * caddyhttp: Implement named routes, `invoke` directive (#5107)
  * rewrite: use escaped path, fix #5278 (#5504)
  * headers: Add > Caddyfile shortcut for enabling defer (#5535)
  * go.mod: Upgrade several dependencies
  * reverseproxy: Expand port ranges to multiple upstreams in CLI + Caddyfile (#5494)
  * fileserver: Use EscapedPath for browse (#5534)
  * caddyhttp: Refactor cert Managers (fix #5415) (#5533)
  * Slightly more helpful error message
  * caddytls: Check for nil ALPN; close #5470 (#5473)
  * cmd: Reduce spammy logs from --watch
  * caddyhttp: Add a getter for Server.name (#5531)
  * caddytls: Configurable fallback SNI (#5527)
  * caddyhttp: Update quic's TLS configs after reload (#5517) (fix #4849)
  * Add doc comment about changing admin endpoint
  * feature: watch include directory (#5521)
  * chore: remove deprecated linters (#5525)
  * go.mod: Upgrade CertMagic again
  * go.mod: Upgrade CertMagic
  * reverseproxy: Optimize base case for least_conn and random_choose policies (#5487)
  * reverseproxy: Fix active health check header canonicalization, refactor (#5446)
  * reverseproxy: Add `fallback` for some policies, instead of always random (#5488)
  * logging: Actually honor the SoftStart parameter
  * logging: Soft start for net writer (close #5520)
  * fastcgi: Fix `capture_stderr` (#5515)
  * acmeserver: Configurable `resolvers`, fix smallstep deprecations (#5500)
  * go.mod: Update some dependencies
  * logging: Add traceID field to access logs when tracing is active (#5507)
  * caddyhttp: Impl `ResponseWriter.Unwrap()`, prep for Go 1.20's `ResponseController` (#5509)
  * reverseproxy: Fix reinitialize upstream healthy metrics (#5498)
  * fix some comments (#5508)
  * templates: Add `fileStat` function (#5497)
  * caddyfile: Stricter parsing, error for brace on new line (#5505)
  * core: Return default logger if no modules loaded
  * celmatcher: Implement `pkix.Name` conversion to string (#5492)
  * chore: Adjustments to CI caching (#5495)
  * reverseproxy: Remove deprecated `lookup_srv` (#5396)
  * cmd: Support `'` quotes in envfile parsing (#5437)
  * Update contributing guidelines (#5466)
  * caddyhttp: Serve http2 when listener wrapper doesn't return *tls.Conn (#4929)
  * reverseproxy: Add `query` and `client_ip_hash` lb policies (#5468)
  * cmd: Create pidfile before config load (close #5477)
  * fileserver: Add color-scheme meta tag (#5475)
  * build(deps): bump actions/setup-go from 3 to 4 (#5474)
  * proxyprotocol: Add PROXY protocol support to `reverse_proxy`, add HTTP listener wrapper (#5424)
  * reverseproxy: Add mention of which half a copyBuffer err comes from (#5472)
  * caddyhttp: Log request body bytes read (#5461)
  * log: Make sink logs encodable (#5441)
  * caddytls: Eval replacer on automation policy subjects (#5459)
  * headers: Support deleting all headers as first op (#5464)
  * replacer: Add HTTP time format (#5458)
  * reverseproxy: Header up/down support for CLI command (#5460)
  * caddyhttp: Determine real client IP if trusted proxies configured (#5104)
  * httpcaddyfile: Adjust path matcher sorting to solve for specificity (#5462)
  * caddytls: Zero out throttle window first (#5443)
  * ci: add `--yes` to cosign arguments (#5440)
  * reverseproxy: Reset Content-Length to prevent FastCGI from hanging (#5435)
  * caddytls: Allow on-demand w/o ask for internal-only
  * caddytls: Require 'ask' endpoint for on-demand TLS
  * fileserver: New file browse template (#5427)
  * go.mod: Upgrade dependencies
  * tracing: Support autoprop from OTEL_PROPAGATORS (#5147)
  * caddyhttp: Enable 0-RTT QUIC (#5425)
  * encode: flush status code when hijacked. (#5419)
  * fileserver: Remove trailing slash on fs filenames (#5417)
  * core: Eliminate unnecessary shutdown delay on Unix (#5413)
  * caddyhttp: Fix `vars_regexp` matcher with placeholders (#5408)
  * context: Rename func to `AppIfConfigured` (#5397)
  * reverseproxy: allow specifying ip version for dynamic `a` upstream (#5401)
  * ci/cd: ship tarballs with vendored deps (#5403)
  * caddyfile: Fix heredoc fuzz crasher, drop trailing newline (#5404)
  * caddyfile: Implement heredoc support (#5385)
  * cmd: Expand cobra support, add short flags (#5379)
  * ci: Update minimum Go version to 1.19
  * go.mod: Upgrade quic-go to v0.33.0 (Go 1.19 min)
  * reverseproxy: refactor HTTP transport layer (#5369)
  * caddytls: Relax the warning for on-demand (#5384)
  * cmd: Strict unmarshal for validate (#5383)
  * caddyfile: Implement variadics for import args placeholders (#5249)
  * cmd: make `caddy fmt` hints more clear (#5378)
  * cmd: Adjust documentation for commands (#5377)
- BuildRequires: golang(API) >= 1.20 for guic-go bump

OBS-URL: https://build.opensuse.org/request/show/1102430
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=28
2023-08-04 19:43:00 +00:00
69843034ff Accepting request 1083782 from home:jfkw:branches:server:http
- Update to version 2.6.4:
  * go.mod: Upgrade acmez and x/net
  * reverseproxy: Don't buffer chunked requests (fix #5366) (#5367)
- Fix failing build on SLE-12 by defining _sharedstatedir /var/lib
  on SLE-12 consistent with SLE-15, openSUSE and upstream RPM docs.

OBS-URL: https://build.opensuse.org/request/show/1083782
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=26
2023-05-02 08:12:23 +00:00
2bed7e7874 Accepting request 1063988 from home:avicenzi:branches:server:http
Update to version 2.6.3

Fix CVE-2022-41721 (boo#1207207)

OBS-URL: https://build.opensuse.org/request/show/1063988
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=24
2023-02-09 11:16:56 +00:00
d26cce3b76 Accepting request 1010537 from home:jfkw:branches:server:http
- Update to version 2.6.2:

OBS-URL: https://build.opensuse.org/request/show/1010537
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=22
2022-10-14 07:55:17 +00:00
e28a023924 Accepting request 1005667 from home:jfkw:branches:server:http
- Update to version 2.6.1:
  * core: Reuse unix sockets (UDS) and don't try to serve HTTP/3 over UDS (#5063)
  * encode: don't WriteHeader unless called (#5060)
  * fileserver: Reinstate --debug flag

OBS-URL: https://build.opensuse.org/request/show/1005667
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=20
2022-09-29 08:07:12 +00:00
43fdb3ab5b Accepting request 1005069 from home:jfkw:branches:server:http
- Update to version 2.6.0:
- BuildRequires: golang(API) >= 1.18 for new net/netip package

OBS-URL: https://build.opensuse.org/request/show/1005069
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=18
2022-09-21 10:02:44 +00:00
eaeeba09a0 Accepting request 992223 from home:avicenzi:branches:server:http
Add bsc#1201822 (CVE-2022-34037) mention in changelog

OBS-URL: https://build.opensuse.org/request/show/992223
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=16
2022-08-02 10:20:14 +00:00
c25860fe73 Accepting request 989489 from home:dirkmueller:Factory
- Update to version 2.5.2:
  * admin: expect quoted ETags (#4879)
  * headers: Only replace known placeholders (#4880)
  * reverseproxy: Err 503 if all upstreams unavailable
  * reverseproxy: Adjust new TLS Caddyfile directive names (#4872)
  * fileserver: Use safe redirects in file browser
  * admin: support ETag on config endpoints (#4579)
  * go.mod: Bump up quic-go to v0.28.0, fixes for BC breaks (#4867)
  * caddytls: Reuse issuer between PreCheck and Issue (#4866)
  * admin: Implement /adapt endpoint (close #4465) (#4846)
  * forwardauth: Fix case when `copy_headers` is omitted (#4856)
  * Expose several Caddy HTTP Matchers to the CEL Matcher (#4715)
  * reverseproxy: Fix double headers in response handlers (#4847)
  * reverseproxy: Fix panic when TLS is not configured (#4848)
  * reverseproxy: Skip TLS for certain configured ports (#4843)
  * go.mod: Update some dependencies
  * forwardauth: Support renaming copied headers, block support (#4783)
  * Add comment about xcaddy to main
  * headers: Support wildcards for delete ops (close #4830) (#4831)
  * reverseproxy: Dynamic ServerName for TLS upstreams (#4836)
  * reverseproxy: Make TLS renegotiation optional
  * reverseproxy: Add renegotiation param in TLS client (#4784)
  * caddyhttp: Log error from CEL evaluation (fix #4832)
  * reverseproxy: Correct the `tls_server_name` docs (#4827)
  * reverseproxy: HTTP 504 for upstream timeouts (#4824)
  * caddytls: Make peer certificate verification pluggable (#4389)
  * reverseproxy: api: Remove misleading 'healthy' value
  * go.mod: Update go-yaml to v3
  * Fix #4822 and fix #4779
  * reverseproxy: Add --internal-certs CLI flag #3589 (#4817)

OBS-URL: https://build.opensuse.org/request/show/989489
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=14
2022-07-19 11:44:45 +00:00
2c3dce4e8f Accepting request 981170 from home:avicenzi:branches:server:http
Add mention to CVE fixed in 2.5.0

OBS-URL: https://build.opensuse.org/request/show/981170
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=12
2022-06-07 15:34:49 +00:00
26dafeecab Accepting request 978655 from home:avicenzi:branches:server:http
Update to 2.5.1

OBS-URL: https://build.opensuse.org/request/show/978655
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=10
2022-05-23 08:58:48 +00:00
f9e2ffede7 Accepting request 964918 from home:avicenzi:branches:server:http
Update to version 2.4.6

OBS-URL: https://build.opensuse.org/request/show/964918
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=8
2022-03-29 13:17:45 +00:00
e74b4e9211 Accepting request 926947 from home:susnux:branches:server:http
- Update to version 2.4.5:
  * Hotfix for a regression introduced in 2.4.4 related to
    combining the encode and reverse_proxy directives.

OBS-URL: https://build.opensuse.org/request/show/926947
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=7
2021-10-22 13:15:00 +00:00
c059ecad03 Accepting request 915786 from home:avicenzi:branches:server:http
Update to version 2.4.4

OBS-URL: https://build.opensuse.org/request/show/915786
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=6
2021-09-07 09:33:23 +00:00
ab36ab51b0 Accepting request 914365 from home:jsegitz:branches:systemdhardening:server:http
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/914365
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=5
2021-09-02 14:38:26 +00:00
52267cd7f2 Accepting request 895174 from home:avicenzi:branches:server:http
Update caddy to 2.4.1

OBS-URL: https://build.opensuse.org/request/show/895174
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=3
2021-06-08 08:31:32 +00:00
29930434aa Accepting request 889343 from home:avicenzi
Add Caddy

OBS-URL: https://build.opensuse.org/request/show/889343
OBS-URL: https://build.opensuse.org/package/show/server:http/caddy?expand=0&rev=1
2021-05-05 09:08:17 +00:00