self-hosted/caddy
self-hosted/caddy
1
0
Fork 0
mirror of https://github.com/caddyserver/caddy synced 2024-10-19 00:23:08 +00:00
Code Issues Packages Projects Releases Wiki Activity

reverse_proxy: Customize SNI value in upstream request (closes #2483)

Browse source
This commit is contained in:
Matthew Holt 2019-10-10 17:17:06 -06:00
parent 715e6ddf51
commit 8715a28320
No known key found for this signature in database
GPG key ID: 2A349DD577D586A5
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
modules/caddyhttp/reverseproxy/httptransport.go
View file

@ -147,6 +147,7 @@ type TLSConfig struct {
ClientCertificateKeyFile string `json:"client_certificate_key_file,omitempty"`
InsecureSkipVerify bool `json:"insecure_skip_verify,omitempty"`
HandshakeTimeout caddy.Duration `json:"handshake_timeout,omitempty"`
ServerName string `json:"server_name,omitempty"`
}
// MakeTLSClientConfig returns a tls.Config usable by a client to a backend.
@ -182,6 +183,9 @@ func (t TLSConfig) MakeTLSClientConfig() (*tls.Config, error) {
cfg.RootCAs = rootPool
}
// custom SNI
cfg.ServerName = t.ServerName
// throw all security out the window
cfg.InsecureSkipVerify = t.InsecureSkipVerify