Easwar Swaminathan
46ab723bb2
multiple: remove appengine specific build constraints and code ( #4685 )
2021-08-24 12:30:13 -07:00
ZhenLian
8ed8dd2655
advancedtls: fix a typo in crl.go ( #4634 )
2021-08-02 13:03:54 -07:00
Matt Jones
ce7bdf50ab
advancedtls: CRL checking for golang gRPC ( #4489 )
...
* Code for CRL checking for golang gRPC.
2021-07-15 09:53:31 -07:00
Zach Reyes
633fbe4dfe
xds: generate per-request hash config selector ( #4525 )
...
* xds: generate per-request hash in config selector
2021-06-17 09:00:05 -04:00
Easwar Swaminathan
397adad6a0
update go.mod and go.sum to point to latest go-control-plane ( #4425 )
2021-05-12 15:52:15 -07:00
Doug Fawley
74fe6eaa41
github: testing action workflow improvements and update to test Go1.16 ( #4358 )
2021-04-22 14:59:51 -07:00
Doug Fawley
29bf29e0ed
xds: add HTTP filter is_optional support (gRFC A39) ( #4221 )
2021-03-02 09:11:35 -08:00
ZhenLian
666aea1fb3
advancedtls: add IPv6 address to certificate SAN names ( #4101 )
...
* advancedtls: add IPv6 address to certificate SAN names
2020-12-18 11:05:59 -08:00
Doug Fawley
668e3ae6d5
testing: stop listening on externally-visible devices ( #4112 )
2020-12-15 15:56:06 -08:00
Easwar Swaminathan
c638ab8ccd
Update envoyproxy/go-control-plane ( #4098 )
2020-12-11 09:14:07 -08:00
ZhenLian
9db56a08b4
advancedtls: add examples demonstrating reloading behaviors ( #4018 )
...
* advancedtls: add examples demonstrating reloading behaviors
2020-12-04 15:47:27 -08:00
ZhenLian
2efef8fd12
advancedtls: fix default host name check issue ( #4069 )
...
* advancedtls: fix default hostname check issue
2020-12-03 09:52:30 -08:00
ZhenLian
8238a33b57
advancedtls: make sni test check common name only ( #4055 )
...
* advancedtls: make sni test check common name only
2020-11-24 09:13:08 -08:00
Easwar Swaminathan
2af65e80c6
advancedtls: Make test happy on Go1.15 ( #4053 )
2020-11-19 11:57:06 -08:00
Easwar Swaminathan
fa59d20167
pemfile: Implement certprovider config parsing API ( #4023 )
2020-11-17 15:36:28 -08:00
ZhenLian
5d7f8c9ae4
advancedtls: make example to use new pemfile API ( #4012 )
...
* advancedtls: make example to use new pemfile API
2020-11-05 23:51:15 -08:00
Easwar Swaminathan
4e179b8d3e
pemfile: Move file watcher plugin from advancedtls to gRPC ( #3981 )
2020-10-30 15:52:55 -07:00
ZhenLian
829af019ba
advancedtls: add examples for reloading from file system ( #3976 )
...
* add examples for reloading from file system
2020-10-27 09:58:31 -07:00
ZhenLian
ce5e366556
advancedtls: add PemFileProvider integration tests ( #3934 )
...
* advancedtls: add PemFileProvider integration tests
2020-10-19 13:54:02 -07:00
ZhenLian
c6cfaba14d
advancedtls: Get Instant Updates Before Ticker Runs ( #3959 )
...
* get instant updates before ticker runs
2020-10-15 11:47:34 -07:00
ZhenLian
bc36dc2cbd
advancedtls: fix build on version prior to 1.14 ( #3950 )
...
* advancedtls: fix build on version prior to 1.14
2020-10-13 12:30:16 -07:00
ZhenLian
3c400e7fcc
advancedtls: clean up test files and shared code ( #3897 )
...
* advancedtls: clean up test files and shared code
2020-10-10 13:47:49 -07:00
Easwar Swaminathan
06c094c3ab
xds/client: Process security configuration from Cluster resource ( #3931 )
2020-10-08 15:50:51 -07:00
Easwar Swaminathan
866de13d56
meshca: CertificateProvider plugin implementation. ( #3871 )
2020-09-29 17:40:30 -07:00
Doug Fawley
02cd07d9bb
cmd/protoc-gen-go-grpc: revert to interface-based service registration ( #3911 )
2020-09-29 15:17:06 -07:00
ZhenLian
0f7e218c2c
advancedtls: add fields for root and identity providers in API ( #3863 )
...
* add provider in advancedtls API for pem file reloading
2020-09-17 12:08:03 -07:00
Doug Fawley
ff9dd65c90
protoc-gen-go-grpc: generate interfaces optionally; remove NewFooService ( #3876 )
2020-09-16 10:15:56 -07:00
ZhenLian
9a132e444f
advancedtls: add PEMFileProvider implementation for on-file-change credential reloading ( #3826 )
...
* add provider for pem file reloading
2020-09-02 00:01:40 -07:00
Menghan Li
d8ef479ab7
internal: fix build for gae ( #3852 )
2020-08-28 09:59:40 -07:00
cindyxue
b830b5f361
advancedtls: fixed SNI testing and put SNI functions back in advancedtls.go ( #3774 )
...
* Fixed sni unit test
2020-08-06 11:10:47 -07:00
cindyxue
446b4dba54
advancedtls: add spiffe support in aTLS ( #3777 )
...
* Add SPIFFE ID in TLSInfo
2020-08-06 10:40:31 -07:00
Easwar Swaminathan
5f7b337d95
Add some appengine build constraints. ( #3787 )
...
Support for Go1.9 and appengine was removed in https://github.com/grpc/grpc-go/pull/3767 . But it looks like we still need some way to do things differently for certain appengine builds.
2020-08-04 17:46:48 -07:00
Doug Fawley
bc714cd8ae
Remove Go 1.9 / AppEngine support; assume go1.12 build tag ( #3767 )
2020-07-30 16:15:35 -07:00
cindyxue
b72d07f816
advancedtls: migrate testing to grpctest ( #3773 )
...
advancedtls: migrate tests to use grpctest
2020-07-30 13:48:30 -07:00
cindyxue
dfc0c05b2d
advancedtls: Add SNI logic to ServerOptions.GetCertificate ( #3697 )
...
* Add SNI support in the user-provided GetCertificate callback
2020-07-27 23:50:43 -07:00
cindyxue
68098483a7
advancedtls: Add system default CAs to config function ( #3663 )
...
* Add system default CAs to config function
2020-06-27 16:05:33 -07:00
Doug Fawley
38aafd89f8
vet.sh: require ALL modules are tidy; tidy some that are not ( #3709 )
2020-06-24 12:44:51 -07:00
ZhenLian
479df5ea81
advancedtls: check error before deferring close ( #3659 )
2020-06-05 12:22:55 -07:00
ZhenLian
c8482678eb
advancedtls: remove test.Fatal() from child goroutine ( #3595 )
2020-05-04 10:01:09 -07:00
ZhenLian
eedec2c1c3
advancedtls: add leaf cert in verify params ( #3571 )
2020-04-29 11:00:02 -07:00
ZhenLian
d70354e6e2
advancedtls: add field names for unit tests ( #3570 )
...
* advancedtls: add field names for unit tests
2020-04-28 16:00:26 -07:00
ZhenLian
f313ade84c
advancedtls: add fine-grained verification levels in XXXOptions ( #3454 )
2020-04-22 13:44:18 -07:00
ZhenLian
648cf9b00e
advancedtls: use grpc 1.27.0 and small fixes ( #3360 )
2020-02-04 12:46:21 -08:00
ZhenLian
f97821dd2f
advancedtls: add end to end tests ( #3318 )
2020-01-28 14:24:27 -08:00
ZhenLian
d670c2dcc8
advancedtls: fix internal tests ( #3322 )
...
fix an internal error in advanced_tls.test. Previous check is to check against the prefix of the ServerName, which might be different in various environments. We'd better not rely on checking that.
2020-01-15 14:03:38 -08:00
Easwar Swaminathan
62d4bd73ba
security: Add a package level comment to testdata package in advancedtls ( #3317 )
2020-01-14 14:10:59 -08:00
Menghan Li
20bce9a0c6
advancedtls: add package for testdata ( #3306 )
2020-01-10 14:33:38 -08:00
ZhenLian
4a4d179f28
advancedtls: add new module for advanced TLS handshaker ( #3187 )
2020-01-07 15:47:01 -08:00