caddy/modules/caddytls
Jens-Uwe Mager 8626fa3703
caddytls: synchronize storage cleaner with TLS.Stop via context and WaitGroup (#7954)
* caddytls: synchronize storage cleaner with TLS.Stop via context and WaitGroup

* Unify the storage cleanup synchronization to both tls and ech.

* Cannot embed the sync.WaitGroup directly as the TLS struct is copied.

* caddytls: propagate cancellable context to ECH rotation and add sync tests

Pass cancellable context to ECH key rotation so in-flight storage locks
and operations unblock when TLS.Stop is invoked. Add comprehensive tests
verifying TLS.Stop cleanly unblocks and waits for storage cleaner and
ECH workers.

---------

Co-authored-by: Zen Dodd <mail@steadytao.com>
2026-09-05 07:37:57 -06:00
..
distributedstek ci: use gci linter (#5708) 2023-08-14 09:41:15 -06:00
standardstek
acmeissuer.go caddytls: Expand ACME credentials (#7554) 2026-05-03 07:13:57 +10:00
acmeissuer_test.go caddytls: Expand ACME credentials (#7554) 2026-05-03 07:13:57 +10:00
automation.go chore: clean up wording and typo fixes (#7745) 2026-05-20 16:36:30 +10:00
automation_test.go caddytls: Avoid default issuers for implicit tailscale policies (#7577) 2026-03-20 09:36:03 -06:00
capools.go tls: add `system` and `combined` CA pool modules (#7406) 2026-04-06 01:13:34 +03:00
capools_test.go tls: add `system` and `combined` CA pool modules (#7406) 2026-04-06 01:13:34 +03:00
certmanagers.go chore: Add nolints to work around haywire linters (#7493) 2026-02-17 16:52:54 -07:00
certselection.go Use slices.Contains to simplify code (#7039) 2025-05-31 12:03:06 -06:00
connpolicy.go caddytls: match IDN SNI in connection policies (#7742) 2026-05-20 13:52:28 -04:00
connpolicy_test.go caddytls: match IDN SNI in connection policies (#7742) 2026-05-20 13:52:28 -04:00
connpolicy_verifyconnection_test.go caddytls: Fix client auth (fix #7724) (#7727) 2026-05-14 10:05:57 -06:00
ech.go caddytls: synchronize storage cleaner with TLS.Stop via context and WaitGroup (#7954) 2026-09-05 07:37:57 -06:00
ech_dns_test.go tls: add alpn to managed HTTPS records (#7653) 2026-05-10 13:10:29 +10:00
fileloader.go chore: fix lint errors from newer golangci-lint (#7958) 2026-08-25 13:12:10 +10:00
folderloader.go chore: fix lint errors from newer golangci-lint (#7958) 2026-08-25 13:12:10 +10:00
internalissuer.go caddypki: Add support for multiple intermediates in signing chain (#7057) 2025-12-03 11:30:00 -07:00
internalissuer_test.go caddypki: Add support for multiple intermediates in signing chain (#7057) 2025-12-03 11:30:00 -07:00
leaffileloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leaffileloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leaffolderloader.go caddytls: correct documentation of `LeafFolderLoader` (#7327) 2025-11-01 18:29:55 +03:00
leaffolderloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafpemloader.go caddytls: wire up client_auth leaf verifier Caddyfile (#6772) 2025-06-09 08:18:36 -06:00
leafpemloader_test.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
leafstorageloader.go caddytls: clientauth: leaf verifier: make trusted leaf certs source pluggable (#6050) 2024-03-05 14:55:37 -07:00
matchers.go caddytls: skip idna.ToASCII for pure ASCII SNI values (#7770) 2026-05-28 11:18:09 +10:00
matchers_test.go caddytls: match IDN SNI in connection policies (#7742) 2026-05-20 13:52:28 -04:00
ondemand.go caddyhttp: Add `MatchWithError` to replace SetVar hack (#6596) 2024-11-04 23:18:50 +00:00
pemloader.go chore: fix lint errors from newer golangci-lint (#7958) 2026-08-25 13:12:10 +10:00
sessiontickets.go caddytls: fix TLS state races and ECH rotation retry (#7756) 2026-05-20 16:35:40 +10:00
storage_clean_test.go caddytls: synchronize storage cleaner with TLS.Stop via context and WaitGroup (#7954) 2026-09-05 07:37:57 -06:00
storageloader.go caddytls: Give a better error message when given encrypted private keys (#6591) 2024-09-25 06:00:48 -06:00
tls.go caddytls: synchronize storage cleaner with TLS.Stop via context and WaitGroup (#7954) 2026-09-05 07:37:57 -06:00
tls_wildcard_test.go caddytls: avoid duplicate automation for wildcard-covered hosts (#7697) 2026-05-11 00:08:40 +10:00
values.go Fix typo in TLS group x25519mlkem768 2025-03-03 10:26:42 -07:00
zerosslissuer.go chore: Add nolints to work around haywire linters (#7493) 2026-02-17 16:52:54 -07:00