Function implicitACMEIssuers

caddyconfig/httpcaddyfile/tlsapp.go:619–660

implicitACMEIssuers returns the issuers to use for ACME-related tls shortcuts such as ca, ca_root, and dns. If any global cert_issuer options configure ACME issuers, those become the templates for the local shortcut configuration; otherwise, default ACME issuers are used.

(h Helper, acmeIssuer *caddytls.ACMEIssuer)

// configure ACME issuers, those become the templates for the local shortcut
// configuration; otherwise, default ACME issuers are used.
func implicitACMEIssuers(h Helper, acmeIssuer *caddytls.ACMEIssuer) []certmagic.Issuer {
	globalIssuers, _ := h.Option("cert_issuer").([]certmagic.Issuer)

	var implicitIssuers []certmagic.Issuer
	for _, issuer := range globalIssuers {
		acmeWrapper, ok := issuer.(acmeCapable)
		if !ok {
			continue
		}
		baseIssuer := acmeWrapper.GetACMEIssuer()
		if baseIssuer == nil {
			continue
		}
		implicitIssuers = append(implicitIssuers, mergeACMEIssuers(baseIssuer, acmeIssuer))
	}
	if len(implicitIssuers) > 0 {
		return implicitIssuers
	}

	// If an ACME CA endpoint was set locally, the user expects to use only that
	// CA rather than the usual default fallback issuers.
	defaultIssuers := caddytls.DefaultIssuers(acmeIssuer.Email)
	if acmeIssuer.CA != "" {
		defaultIssuers = []certmagic.Issuer{new(caddytls.ACMEIssuer)}
	}

	implicitIssuers = make([]certmagic.Issuer, 0, len(defaultIssuers))
	for _, issuer := range defaultIssuers {
		acmeWrapper, ok := issuer.(acmeCapable)
		if !ok {
			implicitIssuers = append(implicitIssuers, issuer)
			continue
		}
		baseIssuer := acmeWrapper.GetACMEIssuer()
		if baseIssuer == nil {
			implicitIssuers = append(implicitIssuers, issuer)
			continue
		}
		implicitIssuers = append(implicitIssuers, mergeACMEIssuers(baseIssuer, acmeIssuer))
	}
	return implicitIssuers
}

func mergeACMEIssuers(base, overrides *caddytls.ACMEIssuer) *caddytls.ACMEIssuer {
	if base == nil {