R.B. Boyer
20f51f9181
connect: derive connect certificate serial numbers from a memdb index instead of the provider table max index ( #7011 )
2020-01-09 16:32:19 +01:00
R.B. Boyer
0675e0606e
connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package ( #6340 )
2019-08-19 13:03:03 -05:00
Kyle Havlovitz
e7946197b8
connect/ca: prevent blank CA config in snapshot
...
This PR both prevents a blank CA config from being written out to
a snapshot and allows Consul to gracefully recover from a snapshot
with an invalid CA config.
Fixes #4954 .
2018-12-06 17:40:53 -08:00
Kyle Havlovitz
baf4db1c72
Use provider state table for a global serial index
2018-06-14 09:42:15 -07:00
Kyle Havlovitz
7c0976208d
Add tests for the built in CA's state store table
2018-06-14 09:42:06 -07:00
Kyle Havlovitz
f7ff16669f
Add the Connect CA config to the state store
2018-06-14 09:41:58 -07:00
Mitchell Hashimoto
1985655dff
agent/consul/state: ensure exactly one active CA exists when setting
2018-06-14 09:41:54 -07:00
Mitchell Hashimoto
2dfca5dbc2
agent/consul/fsm,state: snapshot/restore for CA roots
2018-06-14 09:41:52 -07:00
Mitchell Hashimoto
17d6b437d2
agent/consul/fsm,state: tests for CA root related changes
2018-06-14 09:41:52 -07:00
