linkerd2/pkg
Tarun Pothulapati b389054d53
cli: Don't check for SAN in root and intermediate certs (#5237)
As discussed in #5228, it is not correct for root and intermediate
certs to have SAN. This PR updates the check to not verify the
intermediate issuer cert with the identity dns name (which checks with
SAN and not CN as the the `verify` func is used to verify leaf certs and
not root and intermediate certs). This PR also avoids setting a SAN
field when generating certs in the `install` command.

Fixes #5228
2020-11-18 15:30:39 -08:00
..
addr Add some unit test (#4853) 2020-08-18 16:10:13 -07:00
admin remove admin server timeouts (#4350) 2020-05-08 12:59:43 -07:00
charts inject: Set LINKERD2_PROXY_CORES from the cpu limit (#5170) 2020-11-03 10:02:31 -08:00
config Replace global.proxy.destinationGetNetworks with global.clusterNetworks (#5110) 2020-10-20 19:05:31 -07:00
filesonly Enable lint check for comments (#2023) 2019-01-02 14:03:59 -08:00
flags Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
healthcheck cli: Don't check for SAN in root and intermediate certs (#5237) 2020-11-18 15:30:39 -08:00
identity cli: Don't check for SAN in root and intermediate certs (#5237) 2020-11-18 15:30:39 -08:00
inject inject: Set LINKERD2_PROXY_CORES from the cpu limit (#5170) 2020-11-03 10:02:31 -08:00
issuercerts cli: Don't check for SAN in root and intermediate certs (#5237) 2020-11-18 15:30:39 -08:00
k8s Add 'linkerd.io/inject: ingress' mode (#5130) 2020-10-26 14:32:19 -07:00
multicluster Bump k8s client-go to v0.19.2 (#5002) 2020-09-28 12:45:18 -05:00
profiles Use errors.Is instead of checking underlying err messages (#5140) 2020-10-28 21:33:17 +05:30
prometheus Trace Control plane Components with OC (#3495) 2019-10-18 12:19:13 -07:00
protohttp Use errors.Is instead of checking underlying err messages (#5140) 2020-10-28 21:33:17 +05:30
servicemirror Add support for service-mirror selectors (#4795) 2020-07-30 10:07:14 -07:00
tap Use errors.Is instead of checking underlying err messages (#5140) 2020-10-28 21:33:17 +05:30
tls cli: Don't check for SAN in root and intermediate certs (#5237) 2020-11-18 15:30:39 -08:00
trace Trace Control plane Components with OC (#3495) 2019-10-18 12:19:13 -07:00
tree Expose namespaceSelector for admission webhooks in helm chart (#5074) 2020-10-13 16:08:56 -07:00
util Add unit test for pkg/util/http.go (#4770) 2020-07-21 14:08:53 -07:00
version Update proxy-init to v1.3.7 (#5221) 2020-11-13 15:59:14 -05:00