38 lines
1.1 KiB
Go
38 lines
1.1 KiB
Go
package config
|
|
|
|
// UsesProxyHTTPS 表示网页 HTTPS 由反向代理终止，不代表邮件协议可以关闭 TLS。
|
|
func (c *Config) UsesProxyHTTPS() bool {
|
|
if c == nil {
|
|
return false
|
|
}
|
|
return ResolveHTTPPortDefaults(HTTPConfig{TLSMode: c.TLSMode}, 0).TLSMode == HTTPSTLSModeProxy
|
|
}
|
|
|
|
// EffectiveSSLType 以证书管理责任为准，仅在旧配置未记录管理方式时兼容旧类型。
|
|
func (c *Config) EffectiveSSLType() string {
|
|
if c == nil || c.UsesProxyHTTPS() {
|
|
return SSLTypeUser
|
|
}
|
|
management := c.SSL.Management
|
|
if management == "" && c.SSL.Mode != "" {
|
|
management = EffectiveSSLManagement(c.SSL)
|
|
}
|
|
switch management {
|
|
case SSLManagementProject:
|
|
if c.SSL.Challenge == SSLChallengeDNS || (c.SSL.Challenge == "" && c.SSLType == SSLTypeAutoDNS) {
|
|
return SSLTypeAutoDNS
|
|
}
|
|
return SSLTypeAutoHTTP
|
|
case "":
|
|
if c.SSLType == SSLTypeAutoHTTP || c.SSLType == SSLTypeAutoDNS {
|
|
return c.SSLType
|
|
}
|
|
}
|
|
return SSLTypeUser
|
|
}
|
|
|
|
// AutomaticSSLEnabled 仅允许项目自托管证书自动签发和续期。
|
|
func (c *Config) AutomaticSSLEnabled() bool {
|
|
return c.EffectiveSSLType() != SSLTypeUser
|
|
}
|