open-consul/command
freddygv a21e5799f7 Use internal server certificate for peering TLS
A previous commit introduced an internally-managed server certificate
to use for peering-related purposes.

Now the peering token has been updated to match that behavior:
- The server name matches the structure of the server cert
- The CA PEMs correspond to the Connect CA

Note that if Conect is disabled, and by extension the Connect CA, we
fall back to the previous behavior of returning the manually configured
certs and local server SNI.

Several tests were updated to use the gRPC TLS port since they enable
Connect by default. This means that the peering token will embed the
Connect CA, and the dialer will expect a TLS listener.
2022-10-07 09:05:32 -06:00
..
acl Fix panic on acl token read with -self and -expanded 2022-07-18 15:52:05 -07:00
agent add HCP integration component (#14723) 2022-09-26 14:58:15 -04:00
catalog re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
cli cmd: introduce a shim to expose Stdout/Stderr writers 2021-06-02 16:51:34 -04:00
config feat(cli): enable to delete config entry from an input file (#13677) 2022-07-11 10:13:40 -04:00
connect Address PR comments. 2022-09-01 16:54:24 -05:00
debug debug: update CLI docs 2022-02-15 18:16:12 -05:00
event testing: skip slow tests with -short 2020-12-07 13:42:55 -05:00
exec Replace use of 'sane' where appropriate 2021-07-02 12:18:46 -04:00
flags feat(cli): add initial peering cli commands 2022-09-01 17:20:13 -04:00
forceleave agent: add variation of force-leave that exclusively works on the WAN (#11722) 2021-12-02 17:15:10 -06:00
helpers Rename `PeerName` to `Peer` on prepared queries and exported services (#14854) 2022-10-04 14:46:15 -04:00
info testing: skip slow tests with -short 2020-12-07 13:42:55 -05:00
intention bulk rewrite using this script 2022-01-20 10:46:23 -06:00
join partitions: various refactors to support partitioning the serf LAN pool (#11568) 2021-11-15 09:51:14 -06:00
keygen Update default gossip encryption key size to 32 bytes 2019-07-30 09:45:41 -06:00
keyring Fixup acl.EnterpriseMeta 2022-04-05 15:11:49 -07:00
kv Fix Consul KV CLI 'GET' flags 'keys' and 'recurse' to be set together (#13493) 2022-08-25 18:21:49 -04:00
leave testing: skip slow tests with -short 2020-12-07 13:42:55 -05:00
lock re-run gofmt on 1.17 (#11579) 2021-11-16 12:04:01 -06:00
login Extract AWS auth implementation out of Consul (#13760) 2022-07-19 16:26:44 -05:00
logout acl: gRPC login and logout endpoints (#12935) 2022-05-04 17:38:45 +01:00
maint Fix maint test 2021-07-30 12:58:46 -04:00
members Fixup acl.EnterpriseMeta 2022-04-05 15:11:49 -07:00
monitor fix monitor to only start the monitor in json format when requested (#10358) 2021-06-07 12:08:48 -04:00
operator testing: skip slow tests with -short 2020-12-07 13:42:55 -05:00
peering Use internal server certificate for peering TLS 2022-10-07 09:05:32 -06:00
reload testing: skip slow tests with -short 2020-12-07 13:42:55 -05:00
rtt catalog: compare node names case insensitively in more places (#12444) 2022-02-24 16:54:47 -06:00
services fix(cli): error message in service deregister subcommand (#14028) 2022-08-04 11:07:40 -04:00
snapshot Vendor in rpc mono repo for net/rpc fork, go-msgpack, msgpackrpc. (#12311) 2022-02-14 09:45:45 -08:00
tls Merge pull request #11884 from assareh/patch-1 2022-01-04 15:17:32 -05:00
validate config: replace calls to config.NewBuilder with config.Load 2021-01-27 17:34:43 -05:00
version Fix issue with consul version tests 2022-06-09 17:04:05 -07:00
watch cli: Test API access using /status/leader in consul watch (#10795) 2021-08-09 09:00:33 -07:00
registry.go feat(cli): add initial peering cli commands 2022-09-01 17:20:13 -04:00
registry_oss.go Add build tag for oss (#13279) 2022-05-27 11:39:58 -04:00