Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

www/caddy: template fix tls_server_name option #3948

Merged

Conversation

Monviech
Copy link
Sponsor Member

@Monviech Monviech commented Apr 29, 2024

It is valid to use the tls_server_name option, and most other options, inside a transport_http or transport_ntlm block without having an invalid configuration. For some configurations, it seems to be required to only have tls_server_name inside transport_http.

At the same time, a constraint was added to tls and ntlm because they depend on each other, also in the template.

Fixes: https://forum.opnsense.org/index.php?topic=39951.msg197303#msg197303

It is allowed for these TLS Options to appear more freely inside the transport_http blocks without producing an invalid configuration.

For example, "tls_server_name" is not required to appear together with "tls"
Ensure that when "NTLM" is chosen, TLS has to be enabled at the same time.
@Monviech Monviech changed the title Caddy template fix tls_server_name option www/caddy: template fix tls_server_name option Apr 29, 2024
@Monviech Monviech mentioned this pull request May 3, 2024
4 tasks
@fichtner fichtner self-assigned this May 6, 2024
@fichtner fichtner merged commit b3a6eca into opnsense:master May 6, 2024
@fichtner
Copy link
Member

fichtner commented May 6, 2024

merged, thanks!

@Monviech Monviech mentioned this pull request May 7, 2024
20 tasks
@Monviech Monviech deleted the caddy-template-tls-server-name-fix branch May 7, 2024 08:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants