mirror of
https://github.com/coredns/coredns.git
synced 2025-10-28 16:54:15 -04:00
plugin/tls: make CA parameter optional (#1800)
This commit is contained in:
committed by
John Belamaric
parent
8026dc2560
commit
bffb955f69
@@ -22,9 +22,11 @@ wire data of a DNS message.
|
||||
## Syntax
|
||||
|
||||
~~~ txt
|
||||
tls CERT KEY CA
|
||||
tls CERT KEY [CA]
|
||||
~~~
|
||||
|
||||
Parameter CA is optional. If not set, system CAs can be used to verify the client certificate
|
||||
|
||||
## Examples
|
||||
|
||||
Start a DNS-over-TLS server that picks up incoming DNS-over-TLS queries on port 5553 and uses the
|
||||
|
||||
@@ -24,10 +24,10 @@ func setup(c *caddy.Controller) error {
|
||||
|
||||
for c.Next() {
|
||||
args := c.RemainingArgs()
|
||||
if len(args) != 3 {
|
||||
if len(args) < 2 || len(args) > 3 {
|
||||
return plugin.Error("tls", c.ArgErr())
|
||||
}
|
||||
tls, err := tls.NewTLSConfig(args[0], args[1], args[2])
|
||||
tls, err := tls.NewTLSConfigFromArgs(args...)
|
||||
if err != nil {
|
||||
return plugin.Error("tls", err)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user