PowerDNS / weakforced

Anti-Abuse for servers at authentication time
GNU General Public License v3.0
124 stars 33 forks source link

Enable TLS in webserver and enable outbound TLS configuration #348

Closed neilcook closed 2 years ago

neilcook commented 3 years ago

Wforce has traditionally rolled its own webserver, using the YaHTTP library for HTTP parsing. It did not support TLS or many of the latest HTTP features. This PR adds supports for TLS/HTTPS by:

It is backwards compatible with the old version, however to access the new features like HTTPS, new configuration commands are required. Notably the (single-use) "webserver()" config command is deprecated in favour of (multiple-use) "addListener()".

This PR also adds support for outbound HTTPS/TLS configuration, including:

Additionally this PR removes support for building debian-stretch packages.

This PR addresses both #334 and #325