- [BUGFIX] Effectively enable HTTP/2 support. #72
- [FEATURE] Add support for security-related HTTP headers. #41
- [BUGFIX] Allow RequireAnyClientCert as client_auth_type. #58
- [CHANGE] Move from github.com/go-kit/kit/log to github.com/go-kit/log #55
This release includes a bugfix for a side-channel security issue that would allow an attacker to verify if a user is defined in the configuration by timing request. #39
- [ENHANCEMENT] Cache basic authentication results to significantly improve performance. #32
- [BUGFIX] Prevent user enumeration by timing requests. #39
- [CHANGE] rename
https
package toweb
. #29 - [CHANGE]
web
: Rename Listen() to ListenAndServe(). #28
This release now correctly resolves relative paths with regards to the configuration file, instead of the current working directory.
- [FEATURE]
https
: Add a Validate() function. #22 - [ENHANCEMENT]
https
: Mark kingpin flag as experimental. #20 - [BUGFIX]
https
: Make certificate paths relative to configuration file. #21
- [FEATURE]
https
: Add Serve to use an existing listener. #16 - [BUGFIX] Return 401 Unauthorized when a bad password is used. Previously we returned 403 Forbidden in that case. #17
- [FEATURE]
https/kingpinflags
package for adding kingpin support for TLS. #12
Initial release.
- [FEATURE]
https
package for adding TLS to exporters. #8