Matthew HoltandCopilot 32bb6603b2 caddytls: normalize automation policy selection ...

Policy subjects and handshake names were compared without the IDNA
Lookup normalization CertMagic applies to SNI, so a Unicode or mapped
SNI could select the fallback issuer. Normalize both the same way,
preserving wildcard labels and non-DNS subjects.

Addresses scan report e804f22226c85b87.

Code written by GitHub Copilot (GPT-6.1 Sol, Claude Opus 5.5); reviewed by mholt.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-11-11 11:06:40 -07:00

..

caddyevents

events: tell CertMagic which events are worth emitting (#8010)

2026-10-03 01:03:20 +10:00

caddyfs

events: Refactor; move Event into core, so core can emit events (#6930)

2025-03-29 08:15:43 -06:00

caddyhttp

caddyhttp: preserve invalid UTF-8 bytes throughout path matching

2026-11-11 11:06:40 -07:00

caddypki

acmeserver: say when the CA database is locked by another process (#8007)

2026-09-11 14:49:31 +10:00

caddytls

caddytls: normalize automation policy selection

2026-11-11 11:06:40 -07:00

filestorage

…

internal/network

reverseproxy: reduce lock contention in dynamic SRV and A upstreams (#7949)

2026-11-03 08:37:50 +00:00

logging

logging: filter typed string and certificate SAN arrays

2026-11-11 11:06:40 -07:00

metrics

metrics: scope metrics to active config, add optional per-host metrics (#6531)

2024-10-02 08:23:26 -06:00

standard

…