Update caddy to 0.11.4.
0.11.4 (February 15, 2019)
* New -json-to-caddyfile and -caddyfile-to-json flags
* Fix leaking logging goroutine on SIGUSR1
* basicauth: Error is logged when authentication fails
* proxy: Fix bug by re-adding pre-existing trailing slashes
* tls: Fix bug related to certificate storage path
0.11.3 (February 5, 2019)
* New {server_port} placeholder
* New third-party plugin: extauth
* New flags -log-roll-mb and -log-roll-compress
* basicauth: Bypass for OPTIONS method
* errors/log: Ability to disable log rolling
* proxy: New subdirective 'ca_certificates'
* staticfiles: Require GET method to serve static files
* tls: Fixes to self-signed certs, IP certs, email prompts, & more
* SOLVED REGRESSIONS: #2356, #2414
* A number of other important fixes and improvements
0.11.2 (January 16, 2019)
* Extracted automagic TLS code into CertMagic library
* Add support for new clustering plugins
* New placeholder: '{when_iso_local}'
* New third-party plugins: s3browser, filebrowser
* Removed third-party plugins: jekyll, hugo
* bind: Support multiple interface values
* import: Can now be used within directive blocks
* proxy: Status 499 when clients close connection early
* templates: No longer emit ETag and Last-Modified headers
* tls: Support for the ACME TLS-ALPN-01 challenge
* KNOWN/UNRESOLVED REGRESSIONS: #2356, #2414
* Several bug fixes and minor improvements
0.11.0
This release has been about 6 months in the making! Featuring an integrated
telemetry client, you can now view stats about your Caddy instance and
contribute to Internet research. Telemetry is entirely optional. Read the blog
post and telemetry docs for more information, and check out our global stats!
You can also look up details about your own instances there.
Full change list:
* Built with Go 1.10.2
* Integrated optional telemetry client
* proxy: Fixed file descriptor leak
0.10.14
* tls: Fix error handling bug when obtaining certificates
0.10.13
Caddy 0.10.13 is a minor release that fixes security flaws in TLS client
authentication and On-Demand TLS. It is recommended that everyone relying on
these capabilities upgrade. This release also has bug fixes for the Caddyfile
parser (caught by fuzzing) and handling errors when a certificate could not be
obtained via ACME.
Do not use this version, it cannot obtain certificates due to a bug. Version
0.10.14 fixed this.
Change list:
* New third-party plugin: supervisor
* Updated QUIC
* proxy: Fix transparent pass-thru of X-Forwarded-For
* proxy: Configurable timeout to upstream
* rewrite: Now supports regular expressions on single-line
* tls: StrictHostMatching mode to prevent client auth bypass
* tls: Disable client auth when using QUIC
* tls: Require same client auth cert pools per hostname
* tls: Prevent On-Demand TLS directory traversal
* tls: Fix empty files when using ACME fails to obtain cert
* Fixed test broken by 1.1.1.1 resolving
* Improved Caddyfile parser robustness by fuzzing
0.10.12
This release brings ACMEv2 and wildcard certificate support!
Read the release announcement blog post for details. There's some things in
there you should know, including a description of how some really cool features
work.
Thanks to everyone who contributed to this release!
Change list:
* Switch to Let's Encrypt ACMEv2 production endpoint
* Support for automated wildcard certificates
* Support distributed solving of HTTP-01 challenge
* New {labelN}, {tls_cipher}, and {tls_version} placeholders
* Curly braces can now be escaped when not used as placeholders
* New third-party plugin: geoip
* Updated QUIC
* fastcgi: Add SSL_CIPHER and SSL_PROTOCOL environment variables
* log: New 'except' subdirective to exempt paths from logging
* startup/shutdown: Removed in favor of 'on'
* tls: Default minimum version is TLS 1.2
* tls: Revert to fallback cert if no cert matches SNI
* tls: New 'wildcard' subdirective to force automated wildcard cert
* Several significant bug fixes and improvements!
UnifiedSplitRaw
