-
-
Notifications
You must be signed in to change notification settings - Fork 455
增加证书相关功能 #226
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
增加证书相关功能 #226
Conversation
wsczx
commented
Mar 31, 2023
- 新增支持自定义上传证书功能
- 新增支持申请和自动续期Let's Encrypt证书(暂只支持阿里云和腾讯云)功能
- 新增支持动态加载证书(更换证书不需重启)功能
* 新增支持申请和自动续期Let's Encrypt证书(暂只支持阿里云和腾讯云)功能 * 新增支持动态加载证书(更换证书不需重启)功能
Codecov ReportPatch coverage has no change and project coverage change:
📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more Additional details and impacted files@@ Coverage Diff @@
## dev #226 +/- ##
==========================================
- Coverage 20.54% 19.16% -1.38%
==========================================
Files 61 63 +2
Lines 3812 4086 +274
==========================================
Hits 783 783
- Misses 2907 3181 +274
Partials 122 122
Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here. ☔ View full report in Codecov by Sentry. |
server/handler/server.go
Outdated
MinVersion: tls.VersionTLS12, | ||
CipherSuites: selectedCipherSuites, | ||
GetCertificate: func(*tls.ClientHelloInfo) (*tls.Certificate, error) { | ||
cert, err := tls.LoadX509KeyPair(base.Cfg.CertFile, base.Cfg.CertKey) |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
这个地方,性能不会会比较差
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
确实会有一些影响,但是可以保证实时动态加载证书,或者用一个定时器来定期读取证书文件?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
你可以保存在变量,更新证书的时候,顺便更新一下这个变量
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
好的,谢谢大佬,我改一下
现在证书有三个地方都可以配置, |
没有优先级,上传和Let's Encrypt会覆盖配置文件里面设置的证书文件 |