open-vault/builtin/logical
Alexander Scheel e42fd09b47
Add custom DNS resolver to ACME configuration (#20400)
* Handle caching of ACME config

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add DNS resolvers to ACME configuration

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add custom DNS resolver to challenge verification

This required plumbing through the config, reloading it when necessary,
and creating a custom net.Resolver instance.

Not immediately clear is how we'd go about building a custom DNS
validation mechanism that supported multiple resolvers. Likely we'd need
to rely on meikg/dns and handle the resolution separately for each
container and use a custom Dialer that assumes the address is already
pre-resolved.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Improvements to Docker harness

 - Expose additional service information, allowing callers to figure out
   both the local address and the network-specific address of the
   service container, and
 - Allow modifying permissions on uploaded container files.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add infrastructure to run Bind9 in a container for tests

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Validate DNS-01 challenge works

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

---------

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2023-04-27 15:30:29 -04:00
..
aws Revert changes to STS leases but keep the ttl field (#20034) 2023-04-13 15:02:39 -05:00
consul openapi: Add display attributes for Consul (#19413) 2023-04-13 11:31:37 -04:00
database openapi: Add display attributes for database plugin (#19414) 2023-04-10 14:22:02 -04:00
nomad Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
pki Add custom DNS resolver to ACME configuration (#20400) 2023-04-27 15:30:29 -04:00
pkiext Use a dedicated runner for the binary-based tests. (#20377) 2023-04-27 09:41:49 -04:00
rabbitmq Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
ssh Add support for docker testclusters (#20247) 2023-04-24 14:25:50 -04:00
totp openapi: Add display attributes for TOTP plugin (#19544) 2023-04-10 13:32:15 -04:00
transit openapi: Add display attributes for transit plugin (#19575) 2023-04-10 14:20:53 -04:00