xfy911
fc1de2d445
docs: add documentation comments for more exported constants and variables
...
- Add comments for ssl/client_verify.go verification modes
- Add comments for security/auth.go hash algorithms
- Add comments for rewrite/rewrite.go flags
- Add comments for compression/compression.go algorithms
- Add comments for limitrate/limitrate.go strategies
- Include author attribution (xfy)
2026-06-03 15:28:53 +08:00
96bd4b0ed5
refactor(ssl): 提取证书池加载函数到 sslutil 包
...
将 LoadCACertPool 和 LoadCertPool 函数提取到独立的 sslutil 包，
消除 ssl 和 stream 模块中的重复实现。
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-13 10:58:57 +08:00
8b382606df
Merge branch 'lint-fix' - resolve sendfile.go conflict
...
Conflict: sendfile.go (!linux build tag) was incorrectly modified to
include linuxSendfile and getSocketFd functions which already exist
in sendfile_linux.go.
Resolution: Keep HEAD version (simple fallback returning ENOTSUP) as
Linux implementation is properly separated in sendfile_linux.go.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-13 09:26:48 +08:00
01343ce783
refactor(ssl): 提取客户端验证模式常量
...
将硬编码字符串提取为私有常量，避免魔法字符串重复。
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-04-10 17:59:22 +08:00
9d49349ee1
feat(ssl,config): 新增 Session Tickets 和 mTLS 客户端证书验证
...
- SessionTicketsConfig 支持 TLS 1.3 会话恢复，密钥轮换和持久化
- ClientVerifyConfig 支持双向 TLS 认证，CA 证书池和 CRL
- TLSManager 集成 SessionTicketManager 和 ClientVerifier
- 新增完整测试覆盖密钥轮换和客户端验证逻辑
Co-Authored-By: Claude <noreply@anthropic.com>
2026-04-08 14:36:47 +08:00
