Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

www/caddy: Add HTTP version selection. Mark NTLM as deprecated. #4071

Merged
merged 1 commit into from
Jul 3, 2024

Conversation

Monviech
Copy link
Member

@Monviech Monviech commented Jul 3, 2024

  • Theoretically, NTLM only hard codes the transport http to versions 1.1 as transport http_ntlm before the option versions in transport http existed. So, NTLM could be replaced by setting http versions 1.1., since NTLM always requires the full header being sent. HTTP versions 2 only sends the header one time, and that makes Outlook fail to authenticate.
  • At the same time, this also adds support for HTTP/3 versions 3 to the upstream, which is included in the latest Caddy version 2.8.4 we have rolled out.

…etically, it only hard codes the transport http to versions 1.1. So, NTLM could be replaced by setting the http version to that value. At the same time, this also adds support for HTTP/3 to the upstream, which is included in the latest Caddy version 2.8.4 we have rolled out.
@swhite2 swhite2 merged commit a01fd04 into opnsense:master Jul 3, 2024
@Monviech Monviech deleted the caddy-http-version branch July 3, 2024 18:49
@swhite2 swhite2 self-assigned this Jul 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants