Felix Bünemann 4ecb17cc4c registry: support whitelisting letsencrypt hosts ... This adds a configuration setting `HTTP.TLS.LetsEncrypt.Hosts` which can be set to a list of hosts that the registry will whitelist for retrieving certificates from Let's Encrypt. HTTPS connections with SNI hostnames that are not whitelisted will be closed with an "unknown host" error. It is required to avoid lots of unsuccessful registrations attempts that are triggered by malicious clients connecting with bogus SNI hostnames. NOTE: Due to a bug in the deprecated vendored rsc.io/letsencrypt library clearing the host list requires deleting or editing of the cachefile to reset the hosts list to null. Signed-off-by: Felix Buenemann <felix.buenemann@gmail.com>		2018-02-01 21:16:58 +01:00
..
configuration.go	registry: support whitelisting letsencrypt hosts	2018-02-01 21:16:58 +01:00
configuration_test.go	registry: support whitelisting letsencrypt hosts	2018-02-01 21:16:58 +01:00
parser.go	moved Sirupsen to sirupsen on a case sensitive system	2017-06-23 20:28:48 +00:00