thib8956/nginx-proxy
1
0
Fork 0
mirror of https://github.com/thib8956/nginx-proxy synced 2026-08-15 10:32:48 +00:00
Code Issues Releases Wiki Activity
598 Commits 3 Branches 6 Tags
2bde43c6e94c9f9cb818636b1c84858537830300
Commit Graph
78 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Steve Kamerman ad41178036 Fixed tests that are now failing due to the dhparam clearing command beating the nginx startup. This is fixed permanently in #1213, but this PR fixes the test so as not to rely on the dhparam autogen, which is tested elsewhere. 2019-02-04 15:15:04 -05:00
Steve Kamerman 936e57a6de Fixed #1080, can't disable HSTS with noredirect 2018-08-01 11:30:06 -04:00
Steve Kamerman 4e6900e872 Added TLSv1.3 support 2018-04-22 18:29:35 -04:00
Steve Kamerman af266c0b83 Remove old docker.list to avoid getting unstable Docker version 2018-04-22 16:43:00 -04:00
Steve Kamerman 9be2624d09 Increased dependency versions to get around pip internal problem 2018-04-22 16:11:32 -04:00
Steve Kamerman c417813df9 Fixed out-of-scope variable 2018-04-22 16:03:43 -04:00
Steve Kamerman d7e939dc27 Added info on enabling OCSP Stapling 2018-03-28 11:43:41 -04:00
Steve Kamerman 3590c1bae0 Added regression test to ensure HSTS works for errors 2018-03-26 14:58:06 -04:00
Steve Kamerman c1ae91364c Added endpoint to allow testing alternate response codes 2018-03-26 14:57:50 -04:00
Steve Kamerman 612bf72ceb Support old and new versions of requests 2017-11-08 23:19:13 -05:00
Steve Kamerman ebd1485b09 Catch SSLError instead of CertificateError 2017-11-08 22:53:44 -05:00
Steve Kamerman 58a02f107e Removed '-verify 0' - to disable verification, exclude -verify entirely 2017-11-08 22:42:52 -05:00
Steve Kamerman a312472fb5 Added custom HSTS support (issue #953) 2017-11-08 22:30:24 -05:00
Steve Kamerman 5d503b48cb Added support for IPv6 DNS servers in resolver generation (issue #938) 2017-10-19 20:58:34 -04:00
Steve Kamerman 93d90884e2 Implemented NETWORK_ACCESS (squash commit) 2017-10-18 13:29:12 -04:00
Steve KamermanandTeoh Han Hui 0cc71fad49 Add dynamically-computed DNS resolvers to nginx (for PR #574) 2017-07-31 17:44:27 +08:00
Steve Kamerman 026ba7cdac Added DHParam compatibility note 2017-06-18 21:30:59 -04:00
Steve Kamerman 761bbf9dbc Removed duplicate server_names_hash_bucket_size directive 2017-06-18 21:21:05 -04:00
Steve KamermanandGitHub 6912414750 Merge branch 'master' into feature_ssl_improvement 2017-03-08 11:31:01 -05:00
Steve KamermanandGitHub e373a5199b Merge branch 'master' into feature_ssl_improvement 2017-03-08 10:49:02 -05:00
Steve KamermanandGitHub c2544d4c78 Merge pull request #2 from thomasleveil/PR/589 
TESTS: refactor dhparam tests
 2017-03-07 20:51:06 -05:00
Steve Kamerman 98b5828f83 Modified tests to include dhparams 2017-03-07 14:04:44 -05:00
Steve Kamerman 0244b4e71e Added dhparams test in new format 2017-03-07 14:04:37 -05:00
Steve Kamerman ad9af2884d Merged master, fixed BATS conflict 2017-03-06 10:48:12 -05:00
Steve KamermanandThomas LEVEIL ad57c48465 Fixed HTTPS test 2017-02-16 21:40:54 +01:00
Steve KamermanandThomas LEVEIL 912f5615dc Reorganized certs 2017-02-16 21:40:54 +01:00
Steve KamermanandThomas LEVEIL 8995ba02ba Fixed assertion bug 2017-02-16 21:40:54 +01:00
Steve KamermanandThomas LEVEIL d0e5870060 Added certs, fixed typos 2017-02-16 21:40:54 +01:00
Steve KamermanandThomas LEVEIL 65371e513a Renamed wildcard cert and key 2017-02-16 21:40:54 +01:00
Steve Kamerman d320b43476 Merged conflict in BATS SSL test 2017-01-26 13:46:11 -05:00
Steve Kamerman 276b4dbe3e Merge branch 'master' into feature_nohttps 2017-01-13 13:07:03 -05:00
Steve Kamerman 83a28f47d7 Fixed long server name comment, improved dhparam check 2017-01-12 17:43:13 -05:00
Steve Kamerman b0de1f19d3 Updated to use 256-bit dhparam in tests 2017-01-12 17:25:31 -05:00
Steve Kamerman 7d253dd0f3 Allow passing DHPARAM_BITS via env, lower bits to 256 for unit tests 2017-01-12 14:55:25 -05:00
Steve Kamerman dffc0c47cf Tweak test for reliability on Travis-CI 2017-01-12 10:52:56 -05:00
Steve Kamerman c219822cd8 Typos 2017-01-12 01:53:36 -05:00
Steve Kamerman f73a52afaf Added BATS tests for dhparam generation 2017-01-12 01:45:46 -05:00
Steve Kamerman 7c0f7b9449 Fixed Alpine image, removed dhparams gen from test units 2017-01-12 00:21:39 -05:00
Steve Kamerman 6242403d33 Added dhparam support for alpine variant 2017-01-11 23:04:24 -05:00
Steve Kamerman ebfe5e9c17 Added note about background generation 2017-01-11 22:49:55 -05:00
Steve Kamerman dfdd67f5a4 Implemented background dhparam generation 2017-01-11 22:43:09 -05:00
Steve Kamerman f186815c2d Merged upstream 2017-01-11 22:42:35 -05:00
Steve Kamerman 59b8806859 Travis-CI's apt-get doesn't have --allow-downgrades yet, which is annoying because --force-yes is deprecated 2016-12-05 09:33:44 -05:00
Steve Kamerman 271729aaaa Put --allow-downgrades in the right place 2016-12-05 09:29:08 -05:00
Steve Kamerman dc910107cf Upgrade docker-engine and allow downgrades 2016-12-05 09:21:39 -05:00
Steve Kamerman fc7653bf3d Merge branch 'master' into feature_nohttps 2016-12-05 09:06:39 -05:00
Steve Kamerman b0de80d46b Moved config edits from Dockerfile to template 2016-10-03 10:21:31 -04:00
Steve KamermanandGitHub 8534185b0c Added newline to config 2016-10-03 10:05:55 -04:00
Steve Kamerman 8cf0b75d80 Updated README with HTTPS_METHOD=nohttps 2016-10-01 11:25:11 -04:00
Steve Kamerman 374b1256cd Add HTTPS_METHOD=https to disable SSL site 2016-10-01 11:22:48 -04:00
Steve Kamerman c091d08fee Updated docs for issue #562 2016-09-29 22:24:06 -04:00
Steve Kamerman ebbf7a7b74 Expanded documentation in SSL/TLS support 2016-09-29 21:57:28 -04:00
Steve Kamerman d3a0da451a TLSv1 End-of-life pushed to June 30, 2018, rolled back for compatibility 2016-09-29 21:35:37 -04:00
Steve Kamerman c51c9980cf Removed TLS 1.0 as it is considered unsafe and must be disabled for PCI compliance 2016-09-29 19:52:20 -04:00
Steve Kamerman 6f2b3f1c54 Issue #586 Removed DES-based SSL ciphers 2016-09-29 17:10:17 -04:00
Steve Kamerman 0b1e9e56e1 Issue #535 Added default 2048-bit dhparam.pem file 2016-09-29 16:48:18 -04:00
Steve Kamerman 9ef0bb3356 Comment typo 2016-09-29 16:06:53 -04:00
Steve Kamerman b9bf183df2 Added httpoxy test 2016-09-29 15:43:07 -04:00
Steve Kamerman 7422539f20 Updated README to reflect X-Forwarded-Port 2016-09-29 15:42:49 -04:00
Steve Kamerman 112aad39b6 Implemented more advanced webserver with routing and request header echoing, added header tests 2016-09-29 15:36:01 -04:00
Steve Kamerman 124b8cd757 Honor upstream forwarded port if available 2016-09-29 11:33:21 -04:00
Steve Kamerman 6ebbdb10c7 Merge branch 'master' into feature_x_forwarded_port 2016-09-29 11:26:51 -04:00
Steve Kamerman 2e29168d92 Added X-Forwarded-Port 2016-07-21 11:23:35 -04:00
Steve Kamerman fd127517b9 Added comments about httpoxy 2016-07-19 11:03:41 -04:00
Steve Kamerman 357d58ad97 Mitigate httpoxy attack (httpoxy.org, CVE-2016-(5385-5388,1000109-1000110) 2016-07-18 13:34:37 -04:00
Steve Kamerman da3e257843 Removed HSTS when HTTPS_METHOD=noredirect, added tests, improved docs wrt HSTS 2016-05-19 23:20:43 -04:00
Steve Kamerman 3d77979efb Expanded documentation on HTTPS_METHOD 2016-05-19 23:16:19 -04:00
Steve Kamerman 786a2375aa Using different path method to hopefully fix cert volume issue in CI systems 2016-04-20 12:47:14 -04:00
Steve Kamerman f296b273ce Normalized indentation, added explicit CERT_NAME 2016-04-20 12:33:21 -04:00
Steve Kamerman 1d0a5d9194 Added SSL/HTTPS tests 2016-04-20 12:20:08 -04:00
Steve Kamerman f294582ae8 Merge branch 'master' of https://github.com/jwilder/nginx-proxy 2016-04-20 11:05:20 -04:00
Steve Kamerman 9671e0c1a2 Merge branch 'master' of https://github.com/jwilder/nginx-proxy 2016-03-18 13:47:11 -04:00
Steve Kamerman 99963b4ab0 Merge branch 'master' of https://github.com/jwilder/nginx-proxy 2016-01-18 16:37:03 -05:00
Steve Kamerman 4a95d84d0d Trying to trigger CI 2015-12-02 21:46:05 -05:00
Steve Kamerman 58fc298dea Semantic change to trigger CI rebuild 2015-12-02 00:29:32 -05:00
Steve Kamerman 4bf7f888d0 Documented HTTPS_METHOD 2015-11-20 17:47:08 -05:00
Steve Kamerman 97c6340a9f Implemented HTTPS noredir 2015-11-20 17:37:06 -05:00
Steve Kamerman 9dd6ad8503 First try at HTTPS_METHOD 2015-11-20 16:53:50 -05:00