This repository has been archived on 2026-11-02. You can view files and clone it. You cannot open issues or pull requests or push a commit.

jschoubben f145d17fc8 route-proxy: the challenge path falls through for real ...

autocert's HTTPHandler answers 404 itself for a token it does not hold
and never consults its fallback on the challenge path — the
predecessor's exact fault, rediscovered live when Mailu's renewal died
behind this proxy on cutover day. tokenOrRoute probes each authority
against a buffered writer and hands a token none of them holds to plain
routing, so a consumer's own ACME client answers its own challenge
through an ordinary path-scoped route. Four tests pin it, including the
cache-key shape a restart-surviving token actually has.

2026-09-26 14:21:52 +02:00

..

authority_test.go

route-proxy: an ACME account belongs to the authority that issued it

2026-09-10 21:02:00 +02:00

challenge_test.go

route-proxy: the challenge path falls through for real

2026-09-26 14:21:52 +02:00

Dockerfile

A route is a grant, and a provider is told where its consumer is

2026-08-31 02:43:19 +02:00

main.go

route-proxy: the challenge path falls through for real

2026-09-26 14:21:52 +02:00

policy_test.go

route-proxy serves a route's internal-name alias, never certifies it

2026-09-25 17:24:13 +02:00

routes_test.go

route-proxy: a second authority for internal names, and a target a route names the scheme of

2026-09-25 20:37:03 +02:00