linkerd2/pkg/tls
Zahari Dichev b4266c93de
Ensure proxy cert does not exceed the lifetime of the certs in the trust chain (#3893)
Fixes a problem where the identitiy serice can issue a certificate that has a lifetime larger than the issuer certificate. This was causing the proxies to end up using an invalid TLS certificate. This fix ensures that the lifetime of the issued certificate is not greater than the smallest lifetime of the certs in the issuer cert trust chain.

Signed-off-by: Zahari Dichev <zaharidichev@gmail.com>
2020-01-09 09:52:29 +02:00
..
ca.go Ensure proxy cert does not exceed the lifetime of the certs in the trust chain (#3893) 2020-01-09 09:52:29 +02:00
ca_test.go Ensure proxy cert does not exceed the lifetime of the certs in the trust chain (#3893) 2020-01-09 09:52:29 +02:00
codec.go Consolidate certificates validation logic (#3810) 2019-12-13 10:01:55 +02:00
cred.go Cert manager support (#3600) 2019-10-24 13:15:14 -07:00
cred_test.go Enable gosimple linter, fix issues (#2356) 2019-02-22 17:19:07 -08:00