Alexey SviridovandGitHub 7441443134 feat(client): verify server certificates against the system root store (#5546) ...

transport.tls.trustedCaFile is installed as RootCAs, and omitting it sets
InsecureSkipVerify, so system-root verification cannot be selected directly.
Add an opt-in transport.tls.useSystemRoots that enables certificate
verification with RootCAs nil when no trusted CA file is set, allowing Go to
use system roots and native verification on macOS and Windows. Defaults are
unchanged.

2026-10-18 14:08:05 +08:00

..

annotations.go

test/e2e: optimize e2e test time by replacing sleeps with TCP readiness checks (#5223)

2026-03-08 23:41:33 +08:00

basic.go

test/e2e: optimize e2e test time by replacing sleeps with TCP readiness checks (#5223)

2026-03-08 23:41:33 +08:00

client_server.go

feat(client): verify server certificates against the system root store (#5546)

2026-10-18 14:08:05 +08:00

client.go

test/e2e: optimize e2e test time by replacing sleeps with TCP readiness checks (#5223)

2026-03-08 23:41:33 +08:00

cmd.go

cmd: use hyphen instead of underscore (#3898)

2023-12-27 10:44:13 +08:00

config.go

test/e2e: optimize e2e test time by replacing sleeps with TCP readiness checks (#5223)

2026-03-08 23:41:33 +08:00

http.go

vhost/http: fix auth bypass when routeByHTTPUser is used with proxy-style requests (#5285)

2026-04-14 00:58:19 +08:00

oidc.go

auth/oidc: fix eager token fetch at startup, add validation and e2e tests (#5234)

2026-03-15 22:29:45 +08:00

server.go

test/e2e: allocate dynamic ports outside whitelist ranges in server whitelist test (#5268)

2026-03-30 00:21:30 +08:00

tcpmux.go

test/e2e: optimize e2e test time by replacing sleeps with TCP readiness checks (#5223)

2026-03-08 23:41:33 +08:00

token_source.go

test/e2e: optimize e2e test time by replacing sleeps with TCP readiness checks (#5223)

2026-03-08 23:41:33 +08:00

wire.go

feat: use binary codec for SUDP packets (#5461)

2026-07-31 16:53:16 +08:00

xtcp.go

test/e2e: optimize e2e test time by replacing sleeps with TCP readiness checks (#5223)

2026-03-08 23:41:33 +08:00