github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
consul/sdk
History
freddygv fac3ddc857 Use internal server certificate for peering TLS 
A previous commit introduced an internally-managed server certificate
to use for peering-related purposes.

Now the peering token has been updated to match that behavior:
- The server name matches the structure of the server cert
- The CA PEMs correspond to the Connect CA

Note that if Conect is disabled, and by extension the Connect CA, we
fall back to the previous behavior of returning the manually configured
certs and local server SNI.

Several tests were updated to use the gRPC TLS port since they enable
Connect by default. This means that the peering token will embed the
Connect CA, and the dialer will expect a TLS listener.
 		2022-10-07 09:05:32 -06:00
..
freeport Track last user of a port 2022-08-08 17:30:05 -04:00
iptables
…
testutil Use internal server certificate for peering TLS 2022-10-07 09:05:32 -06:00
.golangci.yml
…
README.md
…
go.mod Update go version to 1.18.1 2022-04-18 11:41:10 -04:00
go.sum Update go version to 1.18.1 2022-04-18 11:41:10 -04:00

README.md

Internal SDK

Please note that this folder, while public, is not meant for new consumers of these libraries; this should currently be considered an internal, not external, SDK. It is public due to existing needs from other HashiCorp software. The tags in this folder will stay at the 0.x.y level; accordingly users should expect that things can move around, disappear, or change API at any time.