luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
open-vault/builtin/credential/cert
History
Steven Clark 449a0a68f5
Fix race accessing b.crls within cert auth (#18945) 
* Fix race accessing b.crls within cert auth

 - Discovered by CircleCI the pathLogin, pathLoginRenew paths access
   and reloads the b.crls member variable without a lock.
 - Also discovered that pathLoginResolveRole never populated an empty
   b.crls before usage within b.verifyCredentials

* Add cl

* Misc cleanup

 - Introduce a login path wrapper instead of repeating in all the
   various login methods the crl reloading
 - Cleanup updatedConfig, never returned an error and nothing looked at
   the error returned
 - Make the test within TestCRLFetch a little less timing sensitive as
   I was able to trigger a failure due to my machine taking more than
   150ms to load the new CRL
2023-02-01 16:23:06 -05:00
..
cmd/cert
test-fixtures
backend.go Fix race accessing b.crls within cert auth (#18945) 2023-02-01 16:23:06 -05:00
backend_test.go TestClusterCore's TLSConfig becomes a method and does a Clone. (#18914) 2023-01-31 11:05:16 -05:00
cli.go
path_certs.go Document adding metadata to entity alias within cert auth (#18308) 2022-12-12 13:08:00 -05:00
path_config.go Add cached OCSP client support to Cert Auth (#17093) 2022-11-21 10:39:24 -06:00
path_crls.go Fix race accessing b.crls within cert auth (#18945) 2023-02-01 16:23:06 -05:00
path_crls_test.go Fix race accessing b.crls within cert auth (#18945) 2023-02-01 16:23:06 -05:00
path_login.go Fix race accessing b.crls within cert auth (#18945) 2023-02-01 16:23:06 -05:00
path_login_test.go Add cached OCSP client support to Cert Auth (#17093) 2022-11-21 10:39:24 -06:00
test_responder.go Add cached OCSP client support to Cert Auth (#17093) 2022-11-21 10:39:24 -06:00