]> git.ipfire.org Git - thirdparty/dehydrated.git/commit
projects / thirdparty / dehydrated.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ce9eb30) | patch
Don't allow CDN's to send cached responses
authorVictor Coss <gtaxl@gtaxl.net>
Sun, 1 Jun 2025 00:45:56 +0000 (20:45 -0400)
committerLukas Schauer <lukas@schauer.dev>
Tue, 17 Jun 2025 17:52:29 +0000 (19:52 +0200)
commit3d95f18000c3fe2b253465869ad1228e3335706b
tree47a152864fd62cbd9c65d1abdec678e9370b76abtree | snapshot
parentce9eb300e25e6a0b711854547e08ce740aa8c88ccommit | diff
Don't allow CDN's to send cached responses

A lot of CA's use a CDN service to protect and speed up their ACME service. These CDN services can sometimes miss-behave and send cached results. For example DigiCert's ACME service uses the Imperva CDN. It will send cached results on the DNS validation, challenge endpoint, resulting in it being stuck in the processing status, thus dehydrated is hung and never gets the certificate.
dehydrated diff | blob | blame | history
Mirror of https://github.com/dehydrated-io/dehydrated.git