Commit Graph

1044 Commits

Author SHA1 Message Date
Nelson Elhage 0a2476b20e Restore the 0.2 TLS verification behavior.
Namely, don't check the DNS names in TLS certificates when connecting to
other servers.

As of golang 1.3, crypto/tls no longer natively supports doing partial
verification (verifying the cert issuer but not the hostname), so we
have to disable verification entirely and then do the issuer
verification ourselves. Fortunately, crypto/x509 makes this relatively
straightforward.

If the "server_name" configuration option is passed, we preserve the
existing behavior of checking that server name everywhere.

No option is provided to retain the current behavior of checking the
remote certificate against the local node name, since that behavior
seems clearly buggy and unintentional, and I have difficulty imagining
it is actually being used anywhere. It would be relatively
straightforward to restore if desired, however.
2014-06-28 13:32:42 -07:00
Armon Dadgar df637c7070 CHANGELOG updates 2014-06-18 10:35:42 -07:00
Armon Dadgar 93034084ce agent: Fixing missing copy of RejoinAfterLeave flag. #110 2014-06-18 10:32:19 -07:00
Armon Dadgar be0554778d agent: Fix issues with re-registration. Fixes #216 2014-06-17 16:48:19 -07:00
Armon Dadgar fe5fadc6ea Merge branch 'pmarkert-semantic' 2014-06-17 12:50:44 -07:00
Armon Dadgar 87239044a5 Fix merge conflict 2014-06-17 12:50:35 -07:00
Mitchell Hashimoto 90249629c3 Update leader-election.html.markdown 2014-06-17 09:41:59 -07:00
Mitchell Hashimoto 27fec33034 Merge pull request #217 from zembutsu/patch-2
website: fix typos
2014-06-17 09:41:42 -07:00
Jack Pearkes 26050493a2 Merge pull request #219 from pmarkert/master
Fixing small website typos
2014-06-17 07:55:34 -07:00
Phillip Markert 4db6d83f44 website: Fixed semantic meaning of upstream in DNS guide 2014-06-17 10:02:44 -04:00
Phillip Markert fd2380bfc0 website: Format hyperlink inside HTML literal 2014-06-17 09:55:17 -04:00
Phillip Markert 5a345164c7 website: Fixing small typos in guides section 2014-06-17 09:55:00 -04:00
Masahito Zembutsu e262bdc35c fix typos 2014-06-17 21:02:01 +09:00
Armon Dadgar 0577ec21a8 agent: Copy ServerName config 2014-06-13 11:27:44 -07:00
Armon Dadgar 91373968a8 Adding server_name configuration for TLS 2014-06-13 11:10:27 -07:00
Armon Dadgar 355a62496c Adding the build versions 2014-06-13 10:16:56 -07:00
Armon Dadgar 46a5faa388 Cutting v0.3.0 2014-06-13 10:11:53 -07:00
Armon Dadgar 39f61e462c Merge pull request #212 from rbg/master
Seems like we should actually check the reference count.
2014-06-13 09:59:56 -07:00
Armon Dadgar 0188d95c95 Merge pull request #210 from robholland/patch-1
Improve clarity of ?keys behaviour.
2014-06-13 09:57:47 -07:00
Robert B Gordon 987c078957 Seems like we should actually check the reference count. 2014-06-13 11:25:01 -05:00
Rob Holland 7309cbadb9 Improve clarity of ?keys behaviour.
I read the previous version initially as meaning that it would return a list of keys which have no value set, which I couldn't understand. I think this removes some ambiguity.
2014-06-13 12:20:24 +01:00
Armon Dadgar cd66e80eb9 CHANGELOG updates 2014-06-11 15:39:03 -07:00
Armon Dadgar 42f6fbf9a0 bench: results for 0.3rc 2014-06-11 15:39:03 -07:00
Jack Pearkes b514d2677d ui: show service level tags, remove Node.nodeTags 2014-06-11 17:14:20 -04:00
Jack Pearkes 0f7adbf639 ui: show tags inline in list of services in node view 2014-06-11 16:54:03 -04:00
Armon Dadgar 8f4799a062 Version bump for 0.3 RC 2014-06-11 12:18:47 -07:00
Armon Dadgar eeb9911a28 agent: Improve test reliability 2014-06-11 12:01:14 -07:00
Armon Dadgar 2d106f9765 website: Clarify upgrade procedures. Fixes #187. 2014-06-11 11:25:55 -07:00
Armon Dadgar d48379054b website: Update compatibility table for 0.3 2014-06-11 11:08:33 -07:00
Armon Dadgar e9a31bb298 website: Show join help instead of members 2014-06-11 11:08:19 -07:00
Armon Dadgar 90cababb0b website: Mention reload command in addition to SIGHUP 2014-06-11 11:03:59 -07:00
Armon Dadgar 5378542b1c website: Document the new reload command 2014-06-11 11:01:36 -07:00
Armon Dadgar 7b6adb91bd command/reload: Adding new command 2014-06-11 10:58:26 -07:00
Armon Dadgar 4952923ced website: Document reload RPC command 2014-06-11 10:54:36 -07:00
Armon Dadgar 074c238ce8 agent: Add reload to RPC clien 2014-06-11 10:53:34 -07:00
Armon Dadgar 4f77db2d47 agent: Watch reload channel for trigger 2014-06-11 10:53:28 -07:00
Armon Dadgar 46c535a834 agent: Adding reload RPC command 2014-06-11 10:53:12 -07:00
Armon Dadgar 1021f48ad2 agent: Set custom syslog facility. Fixes #170. 2014-06-11 10:28:55 -07:00
Armon Dadgar 648429288e agent: Adding SyslogFacility configuration 2014-06-11 10:18:19 -07:00
Armon Dadgar ea054b8847 consul: Start RPC before Raft, wait to accept connecitons 2014-06-11 10:17:58 -07:00
Armon Dadgar c5b9f4652e scripts: Ensure OSX build works on older versions. Fixes #147. 2014-06-11 10:07:38 -07:00
Armon Dadgar 1812eedad9 consul: start RPC after fully initialized. Fixes #160 2014-06-11 09:46:44 -07:00
Armon Dadgar 2e18774c02 consul: Avoid network for server RPC. Fixes #148. 2014-06-10 19:12:36 -07:00
Armon Dadgar 8b7417a043 testutil: Using the correct RPC struct 2014-06-10 19:12:36 -07:00
Jack Pearkes d23564b3c4 Merge pull request #205 from hashicorp/ui-testing
Initial UI tests
2014-06-10 13:37:07 -07:00
Jack Pearkes 48eaada3ae ui: add nodeShow test 2014-06-10 16:36:06 -04:00
Jack Pearkes 5f98fccf72 ui: add some basic tests 2014-06-10 16:36:06 -04:00
Armon Dadgar e972de44ad agent: Cleanup handling of defer checks 2014-06-10 10:42:55 -07:00
Armon Dadgar 4909c74175 agent: Fixing merge of CheckUpdateInterval 2014-06-09 21:34:19 -07:00
Armon Dadgar cae158b310 consul: Provide output for serfHealth check. Fixes #176. 2014-06-09 16:07:22 -07:00