v0.11.5

caddyserver/caddyv0.11.5Mar 4, 2019by mholt

AI Summary

This release brings TLS 1.3 support and builds with Go 1.12, removing legacy ciphers by default.

Key Highlights

Enabled TLS 1.3 by default for all worthy TLS connections.
Built with Go 1.12.
Re-enabled HEAD requests on static files.
Removed CBC ciphers from the default cipher suite.

Breaking Changes

CBC ciphers have been removed from defaults; users needing TLS 1.0 or 1.1 must specify them explicitly.

New Features

TLS 1.3 support
Go 1.12 build
HEAD method support
Better startup output

Full Release Notes

Caddy 0.11.5 is built with Go 1.12 and brings TLS 1.3 to all worthy TLS connections by default. We've also re-allowed HEAD requests on static files and organized the startup output a little better.

(If you need to enable TLS 1.0 or 1.1 -- please don't -- you now have to [specify TLS 1.0 or TLS 1.1 ciphers](https://caddyserver.com/docs/tls), as those ciphers have been removed from the default cipher suite listing.)

Full change log:

- TLS 1.3
- Built with Go 1.12
- More organized output at startup
- internal: Paths are now hidden from other middlewares
- staticfiles: Allow HEAD method
- tls: TLS 1.3 default max version (1.2 still default min)
- tls: Better handling of empty ACME email addresses
- tls: Removed CBC ciphers from defaults
- Other minor improvements and bug fixes