7928 Commits (fb7bccc69053c20c31ecceffe24b16dcd5c0f789)

 

All Branches   

Search

Author	SHA1	Message	Date
Devin Canterberry	7236c95e11	✅ Match expectation of TLSCipherSuites to values of tls_cipher_suites	7 years ago
Devin Canterberry	a61abcd931	🐛 Formatting changes only; add missing trailing commas	7 years ago
Devin Canterberry	c901307a47	🔒 Update supported TLS cipher suites ... The list of cipher suites included in this commit are consistent with the values and precedence in the [Golang TLS documentation](https://golang.org/src/crypto/tls/cipher_suites.go). > **Note:** Cipher suites with RC4 are still included within the list > of accepted values for compatibility, but **these cipher suites are > not safe to use** and should be deprecated with warnings and > subsequently removed. Support for RC4 ciphers has already been > removed or disabled by default in many prominent browsers and tools, > including Golang. > > **References:** > > * [RC4 on Wikipedia](https://en.wikipedia.org/wiki/RC4) > * [Mozilla Security Blog](https://blog.mozilla.org/security/2015/09/11/deprecating-the-rc4-cipher/)	7 years ago
Devin Canterberry	1db58de366	⤵️ Merge from `master`; no conflicts	7 years ago
Jack Pearkes	6fb94ff40a	website: clarify where ACL token is set in the UI	7 years ago
Jack Pearkes	c66628a06f	website: add section on securing the UI with ACLs ... Figured it would be worth documenting due to #3931.	7 years ago
Paul Banks	844a5fe8c0	Call out the service-watch upgrade notice	7 years ago
Jack Pearkes	652e821511	Merge pull request #3884 from rberlind/master ... Updated Stale Reads section of DNS Caching Guide	7 years ago
Jack Pearkes	101e1d030e	Merge pull request #3952 from slopeinsb/patch-1 ... Update index.html.md	7 years ago
Jack Pearkes	4bddecb195	Update CHANGELOG.md	7 years ago
Devin Canterberry	84d650cc4a	📝 Clarify the list of supported TLS cipher suites ... Previously, the documentation linked to Golang's source code, which can drift from the list of cipher suites supported by Consul. Consul has a hard-coded mapping of string values to Golang cipher suites, so this is a more direct source of truth to help users understand which string values are accepted in the `tls_cipher_suites` configuration value.	7 years ago
Preetha	3ed071b4a6	Merge pull request #3946 from hashicorp/je.fixes ... Small Adjustments	7 years ago
randall thomson	3b1a2af8f1	Update index.html.md ... update cli commands for consul 1.x	7 years ago
Pierre Souchay	aebfcb6767	Fixed minor typo (+ travis tests is unstable)	7 years ago
Pierre Souchay	93fa1f6f49	Optimize size for SRV records, should improve performance a bit ... Stricter Unit tests that checks if truncation was OK.	7 years ago
Preetha Appan	0e3c41738d	Update CHANGELOG.md	7 years ago
Preetha	210cfe5ef9	Merge pull request #3940 from pierresouchay/dns_max_size ... Allow to control the number of A/AAAA Record returned by DNS	7 years ago
Preetha	251cdb9c24	Some tweaks to the documentation for a_record_limit	7 years ago
Pierre Souchay	57310a6446	Updated documentation as requested by @preetapan	7 years ago
Pierre Souchay	d0e45f22df	Fixed wrong format of debug msg in unit test	7 years ago
Pierre Souchay	ce3f47a75d	Performance optimization for services having more than 2k records	7 years ago
Pierre Souchay	7d59249d96	Avoid issue with compression of DNS messages causing overflow	7 years ago
Pierre Souchay	419bf29041	Cleaner Unit tests from suggestions from @preetapan	7 years ago
Pierre Souchay	b77fd5ce9d	64000 max limit to DNS messages since there is overhead ... Added debug log to give information about truncation.	7 years ago
Pierre Souchay	be39fb20cc	[BUGFIX] do not break when TCP DNS answer exceeds 64k ... It will avoid having discovery broken when having large number of instances of a service (works with SRV and A* records). Fixes https://github.com/hashicorp/consul/issues/3850	7 years ago
Jeff Escalante	760b4ff72f	update to latest middleman-hashicorp ... this includes minor text fixes for the universal nav	7 years ago
Jeff Escalante	f9a41e290d	First instance of 'Consul' on homepage -> 'HashiCorp Consul'	7 years ago
Mitchell Hashimoto	fb9b018128	Merge pull request #3944 from hashicorp/f-testify ... agent/consul/fsm: begin using testify/assert	7 years ago
Mitchell Hashimoto	8217564c48	agent/consul/fsm: begin using testify/assert	7 years ago
Pierre Souchay	0b7f620dc6	Allow to control the number of A/AAAA Record returned by DNS ... This allows to have randomized resource records (i.e. each answer contains only one IP, but the IP changes every request) for A, AAAA records. It will fix https://github.com/hashicorp/consul/issues/3355 and https://github.com/hashicorp/consul/issues/3937 See https://github.com/hashicorp/consul/issues/3937#issuecomment-370610509 for details. It basically add a new option called `a_record_limit` and will not return more than a_record_limit when performing A, AAAA or ANY DNS requests. The existing `udp_answer_limit` option is still working but should be considered as deprecated since it works only with DNS clients not supporting EDNS.	7 years ago
Edd Steel	41b1d45cc7	Re-use defined endpoints for tests	7 years ago
Sergei Ryabkov	82d195b695	Highlighting the dead link ... I am proposing to remove a dead link (https://atlas.hashicorp.com/help/consul/alternatives). If the page has moved and the new location is known, it would be of course better to update the link.	7 years ago
Paul Banks	257ad520f2	Merge pull request #3928 from hashicorp/service-token-docs ... Notes on ACL token storage and permissions	7 years ago
Paul Banks	4bf001bf1c	Update CHANGELOG.md	7 years ago
Paul Banks	9a47449c6d	Merge pull request #3899 from pierresouchay/fix_blocking_queries_index ... Services Indexes modified per service instead of using a global Index	7 years ago
Paul Banks	c57451a414	Notes on ACL token storage and permissions	7 years ago
Paul Banks	e833b535a6	Notes on ACL token storage and permissions	7 years ago
Brian Shumate	6d92c28c5c	Clarify encrypt key for WAN joined DCs	7 years ago
Pierre Souchay	7b81e2c3ad	Better information and advices for upgrade to 1.0.7+	7 years ago
Pierre Souchay	360dc1dd8d	Simplified error handling for maxIndexForService ... * added unit tests to ensure service index is properly garbage collected * added Upgrade from Version 1.0.6 to higher section in documentation	7 years ago
Paul Banks	4605d4ed0b	Update CHANGELOG.md	7 years ago
Jack Pearkes	732e0c3bb4	Merge pull request #3922 from hashicorp/docs-fix-two-dc-links ... website: override automatic linking of list items for softlayer dc	7 years ago
Jack Pearkes	10f3eb623a	website: override automatic linking of list items for softlayer dc ... This avoids a conflict with #datacenter later on the page. We're mixing histroic manually specified anchors with generated anchors (via redcarpet / middleman-hashicorp) so we have to manually override the automatic generation here. I was tempted to rewrite the old manual anchors to use the automatic generation, but there is no way to maintain backwards compatibility, so will leave that for a time when it is appropriate for us to break links (or redirect them, etc). Fixes #3916	7 years ago
Preetha	acfc60523f	Merge pull request #3914 from alvin-huang/fix_vendor ... remove old pkgs and put deps of missing packages in vendor.json	7 years ago
Alvin Huang	85c9cfea05	remove old pkgs and put deps of missing packages in vendor.json	7 years ago
Paul Banks	9b97bebc95	Merge pull request #3903 from hashicorp/build-fixes ... [WIP] Attempt to find some low-hanging fruit for CI failures	7 years ago
Paul Banks	64fa1ebb59	Merge pull request #3910 from hashicorp/fix-shell ... Fix test running in non-bash shells	7 years ago
Kyle Havlovitz	5956e778db	Add a link to the leader election guide in the lock API docs	7 years ago
Kyle Havlovitz	1e11082709	Use GOTAGS in the vet make goal	7 years ago
Paul Banks	dbaabb1dbc	Fix test running in non-bash shells	7 years ago