consul

Commit Graph

Author	SHA1	Message	Date
R.B. Boyer	ed8a901be7	connect: include optional partition prefixes in SPIFFE identifiers (#10507 ) NOTE: this does not include any intentions enforcement changes yet	2021-06-25 16:47:47 -05:00
R.B. Boyer	a2876453a5	connect/ca: cease including the common name field in generated certs (#10424 ) As part of this change, we ensure that the SAN extensions are marked as critical when the subject is empty so that AWS PCA tolerates the loss of common names well and continues to function as a Connect CA provider. Parts of this currently hack around a bug in crypto/x509 and can be removed after https://go-review.googlesource.com/c/go/+/329129 lands in a Go release. Note: the AWS PCA tests do not run automatically, but the following passed locally for me: ENABLE_AWS_PCA_TESTS=1 go test ./agent/connect/ca -run TestAWS	2021-06-25 13:00:00 -05:00
Matt Keeler	91d680b830	Merge of auto-config and auto-encrypt code (#8523 ) auto-encrypt is now handled as a special case of auto-config. This also is moving all the cert-monitor code into the auto-config package.	2020-08-31 13:12:17 -04:00

Author

SHA1

Message

Date

R.B. Boyer

ed8a901be7

connect: include optional partition prefixes in SPIFFE identifiers (#10507 )

NOTE: this does not include any intentions enforcement changes yet

2021-06-25 16:47:47 -05:00

R.B. Boyer

a2876453a5

connect/ca: cease including the common name field in generated certs (#10424 )

As part of this change, we ensure that the SAN extensions are marked as
critical when the subject is empty so that AWS PCA tolerates the loss of
common names well and continues to function as a Connect CA provider.

Parts of this currently hack around a bug in crypto/x509 and can be
removed after https://go-review.googlesource.com/c/go/+/329129 lands in
a Go release.

Note: the AWS PCA tests do not run automatically, but the following
passed locally for me:

    ENABLE_AWS_PCA_TESTS=1 go test ./agent/connect/ca -run TestAWS

2021-06-25 13:00:00 -05:00

Matt Keeler

91d680b830

Merge of auto-config and auto-encrypt code (#8523 )

auto-encrypt is now handled as a special case of auto-config.

This also is moving all the cert-monitor code into the auto-config package.

2020-08-31 13:12:17 -04:00

3 Commits (be667e280f1f8c99f63d12af9a222a05e96edade)