open-consul

Commit Graph

Author	SHA1	Message	Date
Matt Keeler	b3ba709b3d	Remove x509 name constraints These were only added as SPIFFE intends to use the in the future but currently does not mandate their usage due to patch support in common TLS implementations and some ambiguity over how to use them with URI SAN certificates. We included them because until now everything seem fine with it, however we've found the latest version of `openssl` (1.1.0h) fails to validate our certificats if its enabled. LibreSSL as installed on OS X by default doesn’t have these issues. For now it's most compatible not to have them and later we can find ways to add constraints with wider compatibility testing.	2018-06-25 12:26:10 -07:00
Kyle Havlovitz	f3089a6647	connect/ca: undo the interface changes and use sign-self-issued in Vault	2018-06-25 12:25:42 -07:00
Kyle Havlovitz	a97c44c1ba	connect/ca: add URI SAN support to the Vault provider	2018-06-25 12:25:41 -07:00
Paul Banks	834ed1d25f	Fixed many tests after rebase. Some still failing and seem unrelated to any connect changes.	2018-06-14 09:42:16 -07:00
Paul Banks	30d90b3be4	Generate CSR using real trust-domain	2018-06-14 09:42:16 -07:00
Paul Banks	02ab461dae	TLS watching integrated into Service with some basic tests. There are also a lot of small bug fixes found when testing lots of things end-to-end for the first time and some cleanup now it's integrated with real CA code.	2018-06-14 09:42:07 -07:00
Paul Banks	dcd277de8a	Wire up agent leaf endpoint to cache framework to support blocking.	2018-06-14 09:42:07 -07:00
Paul Banks	51b1bc028d	Rework connect/proxy and command/connect/proxy. End to end demo working again	2018-06-14 09:41:57 -07:00
Paul Banks	2d6a2ce1e3	connect.Service based implementation after review feedback.	2018-06-14 09:41:56 -07:00
Mitchell Hashimoto	8934f00d03	agent/connect: support SpiffeIDSigning	2018-06-14 09:41:53 -07:00
Mitchell Hashimoto	da1bc48372	agent/connect: rename SpiffeID to CertURI	2018-06-14 09:41:53 -07:00
Mitchell Hashimoto	b0315811b9	agent/connect: use proper keyusage fields for CA and leaf	2018-06-14 09:41:53 -07:00
Mitchell Hashimoto	58b6f476e8	agent: /v1/connect/ca/leaf/:service_id	2018-06-14 09:41:52 -07:00
Mitchell Hashimoto	1928c07d0c	agent/consul: key the public key of the CSR, verify in test	2018-06-14 09:41:51 -07:00
Mitchell Hashimoto	9a8653f45e	agent/consul: test for ConnectCA.Sign	2018-06-14 09:41:51 -07:00

15 Commits