Razvan Dimescu e0c1997056 fix: regenerate TLS cert when services change (hot-reload via ArcSwap) ...

HTTPS proxy certs were generated once at startup. Services added at
runtime via API or LAN discovery got "not secure" in the browser
because their SAN wasn't in the cert. Now the cert is regenerated
on every service add/remove and swapped atomically via ArcSwap.
In-flight connections are unaffected.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-23 16:14:06 +02:00

..

api.rs

fix: regenerate TLS cert when services change (hot-reload via ArcSwap)

2026-03-23 16:14:06 +02:00

blocklist.rs

add TLS, service persistence, blocking panel, query types

2026-03-21 01:15:07 +02:00

buffer.rs

fix FORMERR: filter UNKNOWN records and increase buffer to 4096

2026-03-20 14:11:46 +02:00

cache.rs

add ad blocking, live dashboard, system DNS auto-discovery

2026-03-20 10:54:23 +02:00

config.rs

config visibility, PR review fixes, XSS hardening

2026-03-23 12:24:21 +02:00

ctx.rs

fix: regenerate TLS cert when services change (hot-reload via ArcSwap)

2026-03-23 16:14:06 +02:00

forward.rs

fix truncation check: use == instead of >= for buffer-full detection

2026-03-21 03:35:21 +02:00

header.rs

add Makefile with clippy/rustfmt linting, fix all warnings

2026-03-10 05:04:31 +02:00

lan.rs

fix: regenerate TLS cert when services change (hot-reload via ArcSwap)

2026-03-23 16:14:06 +02:00

lib.rs

add Windows support (Phase 1)

2026-03-22 08:13:53 +02:00

main.rs

fix: regenerate TLS cert when services change (hot-reload via ArcSwap)

2026-03-23 16:14:06 +02:00

override_store.rs

add ad blocking, live dashboard, system DNS auto-discovery

2026-03-20 10:54:23 +02:00

packet.rs

add auto-detect upstream, install script, release workflow

2026-03-20 14:14:20 +02:00

proxy.rs

fix: regenerate TLS cert when services change (hot-reload via ArcSwap)

2026-03-23 16:14:06 +02:00

query_log.rs

add ad blocking, live dashboard, system DNS auto-discovery

2026-03-20 10:54:23 +02:00

question.rs

add TLS, service persistence, blocking panel, query types

2026-03-21 01:15:07 +02:00

record.rs

add TLS, service persistence, blocking panel, query types

2026-03-21 01:15:07 +02:00

service_store.rs

fix: regenerate TLS cert when services change (hot-reload via ArcSwap)

2026-03-23 16:14:06 +02:00

stats.rs

add ad blocking, live dashboard, system DNS auto-discovery

2026-03-20 10:54:23 +02:00

system_dns.rs

fix circular reference: detect DHCP DNS when scutil shows loopback

2026-03-22 10:24:54 +02:00

tls.rs

fix: regenerate TLS cert when services change (hot-reload via ArcSwap)

2026-03-23 16:14:06 +02:00