open-vault/builtin/credential/cert
Steven Clark 449a0a68f5
Fix race accessing b.crls within cert auth (#18945)
* Fix race accessing b.crls within cert auth

 - Discovered by CircleCI the pathLogin, pathLoginRenew paths access
   and reloads the b.crls member variable without a lock.
 - Also discovered that pathLoginResolveRole never populated an empty
   b.crls before usage within b.verifyCredentials

* Add cl

* Misc cleanup

 - Introduce a login path wrapper instead of repeating in all the
   various login methods the crl reloading
 - Cleanup updatedConfig, never returned an error and nothing looked at
   the error returned
 - Make the test within TestCRLFetch a little less timing sensitive as
   I was able to trigger a failure due to my machine taking more than
   150ms to load the new CRL
2023-02-01 16:23:06 -05:00
..
cmd/cert Update to api 1.0.1 and sdk 0.1.8 2019-04-15 14:10:07 -04:00
test-fixtures cert/tests: fix tests due to cert expiry (#6647) 2019-04-26 16:49:30 -07:00
backend.go Fix race accessing b.crls within cert auth (#18945) 2023-02-01 16:23:06 -05:00
backend_test.go TestClusterCore's TLSConfig becomes a method and does a Clone. (#18914) 2023-01-31 11:05:16 -05:00
cli.go Spelling (#4119) 2018-03-20 14:54:10 -04:00
path_certs.go Document adding metadata to entity alias within cert auth (#18308) 2022-12-12 13:08:00 -05:00
path_config.go Add cached OCSP client support to Cert Auth (#17093) 2022-11-21 10:39:24 -06:00
path_crls.go Fix race accessing b.crls within cert auth (#18945) 2023-02-01 16:23:06 -05:00
path_crls_test.go Fix race accessing b.crls within cert auth (#18945) 2023-02-01 16:23:06 -05:00
path_login.go Fix race accessing b.crls within cert auth (#18945) 2023-02-01 16:23:06 -05:00
path_login_test.go Add cached OCSP client support to Cert Auth (#17093) 2022-11-21 10:39:24 -06:00
test_responder.go Add cached OCSP client support to Cert Auth (#17093) 2022-11-21 10:39:24 -06:00