Doug Fawley
fbff2abb0f
*: update `interface{}` to `any` and `go.mod` version to `go 1.19` ( #6544 )
2023-08-14 09:04:46 -07:00
Easwar Swaminathan
d524b40946
multiple: update dependencies after 1.57 branch cut ( #6452 )
2023-07-18 14:09:46 -07:00
Chris Smith
c9d3ea5673
deps: google.golang.org/genproto to latest in all modules ( #6319 )
2023-06-02 10:38:02 -07:00
Arvind Bright
16651f60dd
go.mod: update all dependencies ( #6214 )
2023-04-18 17:02:56 -07:00
Joel Jeske
81b30924fc
security/advancedtls: add TlsVersionOption to select desired min/max TLS versions ( #6007 )
...
Co-authored-by: ZhenLian <zhenlian.cs@gmail.com>
2023-04-10 12:27:04 -07:00
Easwar Swaminathan
415ccdf154
go.mod: update all dependencies after 1.54 branch cut ( #6132 )
2023-03-28 16:03:41 -07:00
Gregory Cooke
1d20f1b500
security/advancedtls: swap from deprecated pkix.CertificateList to x509.RevocationList ( #6054 )
...
Swap from deprecated pkix.CertificateList to x509.RevocationList
pkix.CertificateList is deprecated.
We have an internal wrapper around this for representing CRLs. This PR updates that wrapper to use the preferred x509.RevocationList.
This also replaces x509.ParseCRL (deprecated) with x509.ParseRevocationList. The former supported PEM input, while the latter requires DER, so I added a utility function parseRevocationList that does the PEM -> DER conversion if needed, taken from the x509.ParseCRL implementation.
The one issue here is that x509.RevocationList was introduced in golang 1.19. We are still supporting 1.18. To solve this, I've put build restrictions on crl.go and crl_test.go to only build on 1.19+. Also, I also added the files crl_deprecated.go and crl_deprecated_test.go, which are identical copies to the crl.go and crl_test.go files before this PR. They have the build restriction of <go1.19, so they will be used in the 1.18 build. This change is luckily very isolated and these are the only 2 files that needed the build restrictions.
2023-03-23 13:34:01 -04:00
Easwar Swaminathan
22608213b8
go.mod: upgrade golang.org/x/net to address CVE-2022-41723 ( #6106 )
2023-03-09 16:30:30 -08:00
Luwei Ge
d02039b685
Deflake the integration test. ( #6093 )
...
The short test timeout was causing the DialContext to return an error
even if it was non-blocking when a large number of tests are executed
simultaneously. The way I think we should do with is to stick with the
normal time out but cancel the context promptly, instead of deferring it
at the end to release resources.
2023-03-09 12:28:57 -08:00
Mikhail Mazurskiy
379a2f676c
*: add missing colon to errorf messages to improve readability ( #5911 )
2023-01-17 16:11:47 -08:00
Doug Fawley
bf3ad35240
*: update all dependencies ( #5924 )
2023-01-11 13:49:41 -08:00
Theodore Salvo
f2fbb0e07e
Deprecate use of `ioutil` package ( #5906 )
...
Resolves https://github.com/grpc/grpc-go/issues/5897
2023-01-03 11:20:20 -08:00
Doug Fawley
22c1fd2e10
deps: update golang.org/x/net to latest in all modules ( #5847 )
2022-12-07 10:52:31 -08:00
Gregory Cooke
617d6c8a6c
security/advancedtls: add test for crl cache expiration behavior ( #5749 )
...
* Add test for cache reloading
* cleanup
* swap to using nil for no revoked certs
* Add description for new test
2022-12-01 14:09:57 -05:00
Doug Fawley
50be6ae2f9
go.mod: update all dependencies ( #5803 )
2022-11-18 10:56:02 -08:00
Doug Fawley
824f44910d
go.mod: upgrade x/text to v0.4 to address CVE ( #5769 )
2022-11-07 07:51:22 -08:00
Doug Fawley
778860e606
testing: update Go to 1.19 ( #5717 )
2022-10-17 15:04:34 -07:00
Abirdcfly
c351f37ddc
chore: remove duplicate word in comments ( #5616 )
2022-08-30 14:01:37 -07:00
Zach Reyes
4e780933f8
xds: ignore routes with unsupported cluster specifiers ( #5269 )
2022-03-31 11:02:26 -07:00
ZhenLian
e63e1230fd
advancedtls: remove the usage of CDP in CRL enforcement ( #5218 )
2022-03-25 09:58:06 -07:00
Eric Butler
ebc30b8fc3
reflection: use protobuf/reflect instead of go reflection, fix dynamic messages ( #5180 )
2022-02-15 11:01:42 -08:00
Roland Bracewell Shoemaker
231ca3b24e
security/advancedtls: fix CRL issuer comparison ( #5130 )
...
Fix CRL issuer comparison issue
2022-01-25 13:32:27 -08:00
Easwar Swaminathan
01ed64857e
update go.mod to point to latest cncf/udpa repo ( #4884 )
2021-10-18 15:12:44 -07:00
Easwar Swaminathan
3bae5f5b65
xds: use protos from cncf/xds instead of cncf/udpa ( #4866 )
2021-10-14 16:51:55 -07:00
ZhenLian
710419d32b
advancedtls: add revocation support to client/server options ( #4781 )
2021-09-27 16:42:32 -07:00
Easwar Swaminathan
2f3355d224
xds: update go-control-plane to latest ( #4737 )
2021-09-07 11:11:16 -07:00
Tobias Klauser
ed501aa1fd
xds/internal/resolver: update github.com/cespare/xxhash to v2 ( #4671 )
...
github.com/cespare/xxhash/v2 supports Go ≥ 1.11 and this package states
1.11 in its go.mod file. The only symbol used from the xxhash package is the
Sum64String func which still exists and works the same in v2.
This gets rid of two indirect dependencies.
2021-09-01 14:08:00 -04:00
Easwar Swaminathan
712e8d4f57
Remove support for Go 1.13 and older (cont) ( #4706 )
2021-08-25 14:51:41 -07:00
Easwar Swaminathan
6bd8e8cf30
multiple: remove support for Go 1.11 ( #4700 )
2021-08-24 14:24:34 -07:00
Easwar Swaminathan
46ab723bb2
multiple: remove appengine specific build constraints and code ( #4685 )
2021-08-24 12:30:13 -07:00
ZhenLian
8ed8dd2655
advancedtls: fix a typo in crl.go ( #4634 )
2021-08-02 13:03:54 -07:00
Matt Jones
ce7bdf50ab
advancedtls: CRL checking for golang gRPC ( #4489 )
...
* Code for CRL checking for golang gRPC.
2021-07-15 09:53:31 -07:00
Zach Reyes
633fbe4dfe
xds: generate per-request hash config selector ( #4525 )
...
* xds: generate per-request hash in config selector
2021-06-17 09:00:05 -04:00
Easwar Swaminathan
397adad6a0
update go.mod and go.sum to point to latest go-control-plane ( #4425 )
2021-05-12 15:52:15 -07:00
Doug Fawley
74fe6eaa41
github: testing action workflow improvements and update to test Go1.16 ( #4358 )
2021-04-22 14:59:51 -07:00
Doug Fawley
29bf29e0ed
xds: add HTTP filter is_optional support (gRFC A39) ( #4221 )
2021-03-02 09:11:35 -08:00
ZhenLian
666aea1fb3
advancedtls: add IPv6 address to certificate SAN names ( #4101 )
...
* advancedtls: add IPv6 address to certificate SAN names
2020-12-18 11:05:59 -08:00
Doug Fawley
668e3ae6d5
testing: stop listening on externally-visible devices ( #4112 )
2020-12-15 15:56:06 -08:00
Easwar Swaminathan
c638ab8ccd
Update envoyproxy/go-control-plane ( #4098 )
2020-12-11 09:14:07 -08:00
ZhenLian
9db56a08b4
advancedtls: add examples demonstrating reloading behaviors ( #4018 )
...
* advancedtls: add examples demonstrating reloading behaviors
2020-12-04 15:47:27 -08:00
ZhenLian
2efef8fd12
advancedtls: fix default host name check issue ( #4069 )
...
* advancedtls: fix default hostname check issue
2020-12-03 09:52:30 -08:00
ZhenLian
8238a33b57
advancedtls: make sni test check common name only ( #4055 )
...
* advancedtls: make sni test check common name only
2020-11-24 09:13:08 -08:00
Easwar Swaminathan
2af65e80c6
advancedtls: Make test happy on Go1.15 ( #4053 )
2020-11-19 11:57:06 -08:00
Easwar Swaminathan
fa59d20167
pemfile: Implement certprovider config parsing API ( #4023 )
2020-11-17 15:36:28 -08:00
ZhenLian
5d7f8c9ae4
advancedtls: make example to use new pemfile API ( #4012 )
...
* advancedtls: make example to use new pemfile API
2020-11-05 23:51:15 -08:00
Easwar Swaminathan
4e179b8d3e
pemfile: Move file watcher plugin from advancedtls to gRPC ( #3981 )
2020-10-30 15:52:55 -07:00
ZhenLian
829af019ba
advancedtls: add examples for reloading from file system ( #3976 )
...
* add examples for reloading from file system
2020-10-27 09:58:31 -07:00
ZhenLian
ce5e366556
advancedtls: add PemFileProvider integration tests ( #3934 )
...
* advancedtls: add PemFileProvider integration tests
2020-10-19 13:54:02 -07:00
ZhenLian
c6cfaba14d
advancedtls: Get Instant Updates Before Ticker Runs ( #3959 )
...
* get instant updates before ticker runs
2020-10-15 11:47:34 -07:00
ZhenLian
bc36dc2cbd
advancedtls: fix build on version prior to 1.14 ( #3950 )
...
* advancedtls: fix build on version prior to 1.14
2020-10-13 12:30:16 -07:00