mirror of https://github.com/linkerd/linkerd2.git
b5e39bcbf7
Subject Utilize Common Name or Subject Alternate Name for access checks (#3459) Problem When access restrictions to API server have been enabled with the requestheader-allowed-names configuration, only the Common Name of the requestor certificate is being checked. This check should include the use of Subject Alternate Name attributes. Solution API server will now check the SAN attributes (DNS Names, Email Addresses, IP Addresses, and URIs) when determining accessibility for allowed names. Fixes issue #3459 Signed-off-by: Paul Balogh <javaducky@gmail.com> |
||
|---|---|---|
| .. | ||
| apiserver.go | ||
| apiserver_test.go | ||
| client.go | ||
| handlers.go | ||
| handlers_test.go | ||
| server.go | ||
| server_test.go | ||