open-vault/builtin
Michael Ansel 30b71cbbac Add constraints on the Common Name for certificate-based authentication (#2595)
* Refactor to consolidate constraints on the matching chain

* Add CN prefix/suffix constraint

* Maintain backwards compatibility (pick a random cert if multiple match)

* Vendor go-glob

* Replace cn_prefix/suffix with required_name/globbing

Move all the new tests to acceptance-capable tests instead of embedding in the CRL test

* Allow authenticating against a single cert

* Add new params to documentation

* Add CLI support for new param

* Refactor for style

* Support multiple (ORed) name patterns

* Rename required_names to allowed_names

* Update docs for parameter rename

* Use the new TypeCommaStringSlice
2017-04-30 11:37:10 -04:00
..
audit Rename helper 'duration' to 'parseutil'. (#2449) 2017-03-07 11:21:22 -05:00
credential Add constraints on the Common Name for certificate-based authentication (#2595) 2017-04-30 11:37:10 -04:00
logical Return error message for failure to parse CSR (#2657) 2017-04-28 08:30:24 -04:00