Commit Graph

16 Commits

Author SHA1 Message Date
eshitachandwani cbb5c2f5f9
advancedtls: update CRL provider certificates (#8073) 2025-02-11 14:53:12 +05:30
eshitachandwani ac41314504
.*: Add missing a newline at the end (#7644) 2024-09-18 14:46:09 +05:30
Purnesh Dixit b6fde8cdd1
vet: add check for trailing spaces (#7576)
* vet: trailing spaces check
2024-09-12 11:40:38 +05:30
Nathan Baulch c8951abc16
*: fix minor typos (#7487)
* Fix typos

* Fix reflecton tests
2024-08-14 22:43:01 +05:30
erm-g 408139acc3
security/advancedtls: CRL checks improvement (#6968) 2024-02-14 15:33:38 -08:00
erm-g b82468a346
crl provider: Static and FileWatcher provider implementations (#6670)
* rename certificateListExt to CRL

* CRLProvider file

* Add CRLProvider to RevocationConfig

* Beginning refactor of CRL handling

* Shell of StaticCRLProvider

* basic static crl provider test

* use loadCRL helper

* refactor of CRL loading

* Table tests

* Table tests

* Add tests with Static CRL provider

* New certs to be used for CRL tests. Added test for passing and failing connections based on CRL check outcomes

* Main functionality of File Watcher (Directory) CRL provider

* Refactor async go routine, validate() func, add unit tests

* Custom error callback, related unit tests

* Error callback test improvement

* Comments for StaticCRLProvider

* Comments for public API

* go mod tidy

* Comments for tests

* Fix vet errors

* Change Static provider behavior to match C Core, address other PR comments

* Data race fix

* Test helper fn change

* Address PR comments

* Address PR comments (part 2)

* Migration from context to channel for controlling crl reloading goroutine

* Align in-memory CRL updates during directory scan to C++ behavior

* Improve comments for ScanCRLDirectory

* Base test case for Scan CRL Directory file manipulations

* full set of cases for CRL directory content manipulation

* Add comment for table test structure

* Fix for go.mod and go.sum

* Empty directoru workaround

* Delete deprecated crl functionality

* Restoring deprecated crl files

* Fit to grpctest.Tester pattern

* Update readme for crl provider tests

* Address PR comments

* Revert "Restoring deprecated crl files"

This reverts commit 56437603a4.

* Revert "Resolve conflicts with upstream - deletion of deprecated crl"

This reverts commit e0130640c46efd9a43649bf409c6e762ae66e225, reversing
changes made to 21f430135c.

Revert deletion

* Update link for gRFC proposal

* Address PR comments

* Address PR comments part 1

* Address PR comments part 2

* Address PR comments part 3

* Fix for go.mod and go.sum

* Fix comment typo

* Fix for gRFC tag

* Add more details to CRL api  godoc comments.

* Address PR comments

* Address PR comments

* Delete crl_deprecated.go and crl_deprecated_test.go

* Delete testdate/crl/provider/filewatcher directory and .gitignore under it

* Race test fix

* Address PR comments

* Address PR comments

* Refactor directory reloader test from checking size of crl map to querying individual entries approach

* Add extra case for RefreshDuration config test

* Update cpmment for table test structure

* Unexport scan scanCRLDirectory, drop related mutex, update the comments

* Update API comments, clear tmp dir after the tests

---------

Co-authored-by: Gregory Cooke <gregorycooke@google.com>
2023-10-30 20:41:22 -04:00
Roland Bracewell Shoemaker 231ca3b24e
security/advancedtls: fix CRL issuer comparison (#5130)
Fix CRL issuer comparison issue
2022-01-25 13:32:27 -08:00
Matt Jones ce7bdf50ab
advancedtls: CRL checking for golang gRPC (#4489)
* Code for CRL checking for golang gRPC.
2021-07-15 09:53:31 -07:00
ZhenLian 666aea1fb3
advancedtls: add IPv6 address to certificate SAN names (#4101)
* advancedtls: add IPv6 address to certificate SAN names
2020-12-18 11:05:59 -08:00
ZhenLian 9db56a08b4
advancedtls: add examples demonstrating reloading behaviors (#4018)
* advancedtls: add examples demonstrating reloading behaviors
2020-12-04 15:47:27 -08:00
ZhenLian 2efef8fd12
advancedtls: fix default host name check issue (#4069)
* advancedtls: fix default hostname check issue
2020-12-03 09:52:30 -08:00
cindyxue dfc0c05b2d
advancedtls: Add SNI logic to ServerOptions.GetCertificate (#3697)
* Add SNI support in the user-provided GetCertificate callback
2020-07-27 23:50:43 -07:00
ZhenLian f97821dd2f
advancedtls: add end to end tests (#3318) 2020-01-28 14:24:27 -08:00
Easwar Swaminathan 62d4bd73ba
security: Add a package level comment to testdata package in advancedtls (#3317) 2020-01-14 14:10:59 -08:00
Menghan Li 20bce9a0c6
advancedtls: add package for testdata (#3306) 2020-01-10 14:33:38 -08:00
ZhenLian 4a4d179f28 advancedtls: add new module for advanced TLS handshaker (#3187) 2020-01-07 15:47:01 -08:00