R.B. Boyer c3d5a2a5ab connect/ca: cease including the common name field in generated certs (#10424) ... As part of this change, we ensure that the SAN extensions are marked as critical when the subject is empty so that AWS PCA tolerates the loss of common names well and continues to function as a Connect CA provider. Parts of this currently hack around a bug in crypto/x509 and can be removed after https://go-review.googlesource.com/c/go/+/329129 lands in a Go release. Note: the AWS PCA tests do not run automatically, but the following passed locally for me: ENABLE_AWS_PCA_TESTS=1 go test ./agent/connect/ca -run TestAWS		2021-06-25 13:00:00 -05:00
..
config.go	tlsutil: fix default server name for health checks	2021-06-24 13:49:58 -04:00
config_test.go	tlsutils: more test cases for OutgoingTLSConfigForCheck	2021-06-24 13:49:58 -04:00
generate.go	connect/ca: cease including the common name field in generated certs (#10424)	2021-06-25 13:00:00 -05:00
generate_test.go	tlsutil: fix a test for go1.16	2021-04-13 13:31:20 -04:00