Steve Kamerman
|
c1ae91364c
|
Added endpoint to allow testing alternate response codes
|
2018-03-26 14:57:50 -04:00 |
|
Steve Kamerman
|
612bf72ceb
|
Support old and new versions of requests
|
2017-11-08 23:19:13 -05:00 |
|
Steve Kamerman
|
ebd1485b09
|
Catch SSLError instead of CertificateError
|
2017-11-08 22:53:44 -05:00 |
|
Steve Kamerman
|
58a02f107e
|
Removed '-verify 0' - to disable verification, exclude -verify entirely
|
2017-11-08 22:42:52 -05:00 |
|
Steve Kamerman
|
a312472fb5
|
Added custom HSTS support (issue #953)
|
2017-11-08 22:30:24 -05:00 |
|
Steve Kamerman
|
5d503b48cb
|
Added support for IPv6 DNS servers in resolver generation (issue #938)
|
2017-10-19 20:58:34 -04:00 |
|
Steve Kamerman
|
93d90884e2
|
Implemented NETWORK_ACCESS (squash commit)
|
2017-10-18 13:29:12 -04:00 |
|
 Steve KamermanandTeoh Han Hui
|
0cc71fad49
|
Add dynamically-computed DNS resolvers to nginx (for PR #574)
|
2017-07-31 17:44:27 +08:00 |
|
Steve Kamerman
|
026ba7cdac
|
Added DHParam compatibility note
|
2017-06-18 21:30:59 -04:00 |
|
Steve Kamerman
|
761bbf9dbc
|
Removed duplicate server_names_hash_bucket_size directive
|
2017-06-18 21:21:05 -04:00 |
|
 Steve KamermanandGitHub
|
6912414750
|
Merge branch 'master' into feature_ssl_improvement
|
2017-03-08 11:31:01 -05:00 |
|
 Steve KamermanandGitHub
|
e373a5199b
|
Merge branch 'master' into feature_ssl_improvement
|
2017-03-08 10:49:02 -05:00 |
|
 Steve KamermanandGitHub
|
c2544d4c78
|
Merge pull request #2 from thomasleveil/PR/589
TESTS: refactor dhparam tests
|
2017-03-07 20:51:06 -05:00 |
|
Steve Kamerman
|
98b5828f83
|
Modified tests to include dhparams
|
2017-03-07 14:04:44 -05:00 |
|
Steve Kamerman
|
0244b4e71e
|
Added dhparams test in new format
|
2017-03-07 14:04:37 -05:00 |
|
Steve Kamerman
|
ad9af2884d
|
Merged master, fixed BATS conflict
|
2017-03-06 10:48:12 -05:00 |
|
 Steve KamermanandThomas LEVEIL
|
ad57c48465
|
Fixed HTTPS test
|
2017-02-16 21:40:54 +01:00 |
|
 Steve KamermanandThomas LEVEIL
|
912f5615dc
|
Reorganized certs
|
2017-02-16 21:40:54 +01:00 |
|
 Steve KamermanandThomas LEVEIL
|
8995ba02ba
|
Fixed assertion bug
|
2017-02-16 21:40:54 +01:00 |
|
 Steve KamermanandThomas LEVEIL
|
d0e5870060
|
Added certs, fixed typos
|
2017-02-16 21:40:54 +01:00 |
|
 Steve KamermanandThomas LEVEIL
|
65371e513a
|
Renamed wildcard cert and key
|
2017-02-16 21:40:54 +01:00 |
|
Steve Kamerman
|
d320b43476
|
Merged conflict in BATS SSL test
|
2017-01-26 13:46:11 -05:00 |
|
Steve Kamerman
|
276b4dbe3e
|
Merge branch 'master' into feature_nohttps
|
2017-01-13 13:07:03 -05:00 |
|
Steve Kamerman
|
83a28f47d7
|
Fixed long server name comment, improved dhparam check
|
2017-01-12 17:43:13 -05:00 |
|
Steve Kamerman
|
b0de1f19d3
|
Updated to use 256-bit dhparam in tests
|
2017-01-12 17:25:31 -05:00 |
|
Steve Kamerman
|
7d253dd0f3
|
Allow passing DHPARAM_BITS via env, lower bits to 256 for unit tests
|
2017-01-12 14:55:25 -05:00 |
|
Steve Kamerman
|
dffc0c47cf
|
Tweak test for reliability on Travis-CI
|
2017-01-12 10:52:56 -05:00 |
|
Steve Kamerman
|
c219822cd8
|
Typos
|
2017-01-12 01:53:36 -05:00 |
|
Steve Kamerman
|
f73a52afaf
|
Added BATS tests for dhparam generation
|
2017-01-12 01:45:46 -05:00 |
|
Steve Kamerman
|
7c0f7b9449
|
Fixed Alpine image, removed dhparams gen from test units
|
2017-01-12 00:21:39 -05:00 |
|
Steve Kamerman
|
6242403d33
|
Added dhparam support for alpine variant
|
2017-01-11 23:04:24 -05:00 |
|
Steve Kamerman
|
ebfe5e9c17
|
Added note about background generation
|
2017-01-11 22:49:55 -05:00 |
|
Steve Kamerman
|
dfdd67f5a4
|
Implemented background dhparam generation
|
2017-01-11 22:43:09 -05:00 |
|
Steve Kamerman
|
f186815c2d
|
Merged upstream
|
2017-01-11 22:42:35 -05:00 |
|
Steve Kamerman
|
59b8806859
|
Travis-CI's apt-get doesn't have --allow-downgrades yet, which is annoying because --force-yes is deprecated
|
2016-12-05 09:33:44 -05:00 |
|
Steve Kamerman
|
271729aaaa
|
Put --allow-downgrades in the right place
|
2016-12-05 09:29:08 -05:00 |
|
Steve Kamerman
|
dc910107cf
|
Upgrade docker-engine and allow downgrades
|
2016-12-05 09:21:39 -05:00 |
|
Steve Kamerman
|
fc7653bf3d
|
Merge branch 'master' into feature_nohttps
|
2016-12-05 09:06:39 -05:00 |
|
Steve Kamerman
|
b0de80d46b
|
Moved config edits from Dockerfile to template
|
2016-10-03 10:21:31 -04:00 |
|
 Steve KamermanandGitHub
|
8534185b0c
|
Added newline to config
|
2016-10-03 10:05:55 -04:00 |
|
Steve Kamerman
|
8cf0b75d80
|
Updated README with HTTPS_METHOD=nohttps
|
2016-10-01 11:25:11 -04:00 |
|
Steve Kamerman
|
374b1256cd
|
Add HTTPS_METHOD=https to disable SSL site
|
2016-10-01 11:22:48 -04:00 |
|
Steve Kamerman
|
c091d08fee
|
Updated docs for issue #562
|
2016-09-29 22:24:06 -04:00 |
|
Steve Kamerman
|
ebbf7a7b74
|
Expanded documentation in SSL/TLS support
|
2016-09-29 21:57:28 -04:00 |
|
Steve Kamerman
|
d3a0da451a
|
TLSv1 End-of-life pushed to June 30, 2018, rolled back for compatibility
|
2016-09-29 21:35:37 -04:00 |
|
Steve Kamerman
|
c51c9980cf
|
Removed TLS 1.0 as it is considered unsafe and must be disabled for PCI compliance
|
2016-09-29 19:52:20 -04:00 |
|
Steve Kamerman
|
6f2b3f1c54
|
Issue #586 Removed DES-based SSL ciphers
|
2016-09-29 17:10:17 -04:00 |
|
Steve Kamerman
|
0b1e9e56e1
|
Issue #535 Added default 2048-bit dhparam.pem file
|
2016-09-29 16:48:18 -04:00 |
|
Steve Kamerman
|
9ef0bb3356
|
Comment typo
|
2016-09-29 16:06:53 -04:00 |
|
Steve Kamerman
|
b9bf183df2
|
Added httpoxy test
|
2016-09-29 15:43:07 -04:00 |
|
Steve Kamerman
|
7422539f20
|
Updated README to reflect X-Forwarded-Port
|
2016-09-29 15:42:49 -04:00 |
|
Steve Kamerman
|
112aad39b6
|
Implemented more advanced webserver with routing and request header echoing, added header tests
|
2016-09-29 15:36:01 -04:00 |
|
Steve Kamerman
|
124b8cd757
|
Honor upstream forwarded port if available
|
2016-09-29 11:33:21 -04:00 |
|
Steve Kamerman
|
6ebbdb10c7
|
Merge branch 'master' into feature_x_forwarded_port
|
2016-09-29 11:26:51 -04:00 |
|
Steve Kamerman
|
2e29168d92
|
Added X-Forwarded-Port
|
2016-07-21 11:23:35 -04:00 |
|
Steve Kamerman
|
fd127517b9
|
Added comments about httpoxy
|
2016-07-19 11:03:41 -04:00 |
|
Steve Kamerman
|
357d58ad97
|
Mitigate httpoxy attack (httpoxy.org, CVE-2016-(5385-5388,1000109-1000110)
|
2016-07-18 13:34:37 -04:00 |
|
Steve Kamerman
|
da3e257843
|
Removed HSTS when HTTPS_METHOD=noredirect, added tests, improved docs wrt HSTS
|
2016-05-19 23:20:43 -04:00 |
|
Steve Kamerman
|
3d77979efb
|
Expanded documentation on HTTPS_METHOD
|
2016-05-19 23:16:19 -04:00 |
|
Steve Kamerman
|
786a2375aa
|
Using different path method to hopefully fix cert volume issue in CI systems
|
2016-04-20 12:47:14 -04:00 |
|
Steve Kamerman
|
f296b273ce
|
Normalized indentation, added explicit CERT_NAME
|
2016-04-20 12:33:21 -04:00 |
|
Steve Kamerman
|
1d0a5d9194
|
Added SSL/HTTPS tests
|
2016-04-20 12:20:08 -04:00 |
|
Steve Kamerman
|
f294582ae8
|
Merge branch 'master' of https://github.com/jwilder/nginx-proxy
|
2016-04-20 11:05:20 -04:00 |
|
Steve Kamerman
|
9671e0c1a2
|
Merge branch 'master' of https://github.com/jwilder/nginx-proxy
|
2016-03-18 13:47:11 -04:00 |
|
Steve Kamerman
|
99963b4ab0
|
Merge branch 'master' of https://github.com/jwilder/nginx-proxy
|
2016-01-18 16:37:03 -05:00 |
|
Steve Kamerman
|
4a95d84d0d
|
Trying to trigger CI
|
2015-12-02 21:46:05 -05:00 |
|
Steve Kamerman
|
58fc298dea
|
Semantic change to trigger CI rebuild
|
2015-12-02 00:29:32 -05:00 |
|
Steve Kamerman
|
4bf7f888d0
|
Documented HTTPS_METHOD
|
2015-11-20 17:47:08 -05:00 |
|
Steve Kamerman
|
97c6340a9f
|
Implemented HTTPS noredir
|
2015-11-20 17:37:06 -05:00 |
|
Steve Kamerman
|
9dd6ad8503
|
First try at HTTPS_METHOD
|
2015-11-20 16:53:50 -05:00 |
|