You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Dhia Ayachi 58bd817336 check expiry date of the root/intermediate before using it to sign a leaf (#10500) ... * ca: move provider creation into CAManager This further decouples the CAManager from Server. It reduces the interface between them and removes the need for the SetLogger method on providers. * ca: move SignCertificate to CAManager To reduce the scope of Server, and keep all the CA logic together * ca: move SignCertificate to the file where it is used * auto-config: move autoConfigBackend impl off of Server Most of these methods are used exclusively for the AutoConfig RPC endpoint. This PR uses a pattern that we've used in other places as an incremental step to reducing the scope of Server. * fix linter issues * check error when `raftApplyMsgpack` * ca: move SignCertificate to CAManager To reduce the scope of Server, and keep all the CA logic together * check expiry date of the intermediate before using it to sign a leaf * fix typo in comment Co-authored-by: Kyle Havlovitz <kylehav@gmail.com> * Fix test name * do not check cert start date * wrap error to mention it is the intermediate expired * Fix failing test * update comment Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * use shim to avoid sleep in test * add root cert validation * remove duplicate code * Revert "fix linter issues" This reverts commit 6356302b54. * fix import issue * gofmt leader_connect_ca * add changelog entry * update error message Co-authored-by: Freddy <freddygv@users.noreply.github.com> * fix error message in test Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> Co-authored-by: Kyle Havlovitz <kylehav@gmail.com> Co-authored-by: Freddy <freddygv@users.noreply.github.com>		3 years ago
..
common.go	Format certificates properly (rfc7468) with a trailing new line (#10411)	3 years ago
mock_Provider.go	Ensure that CA initialization does not block leader election.	4 years ago
provider.go	ca: move provider creation into CAManager	3 years ago
provider_aws.go	check expiry date of the root/intermediate before using it to sign a leaf (#10500)	3 years ago
provider_aws_test.go	ca: use provider constructors to be more consistent	3 years ago
provider_consul.go	connect/ca: ensure edits to the key type/bits for the connect builtin CA will regenerate the roots (#10330)	3 years ago
provider_consul_config.go	Move IntermediateCertTTL to common CA config	4 years ago
provider_consul_test.go	connect/ca: ensure edits to the key type/bits for the connect builtin CA will regenerate the roots (#10330)	3 years ago
provider_test.go	ca: remove unused RotationPeriod field	3 years ago
provider_vault.go	connect/ca: require new vault mount points when updating the key type/bits for the vault connect CA provider (#10331)	3 years ago
provider_vault_test.go	ca: move provider creation into CAManager	3 years ago
testing.go	ca: use provider constructors to be more consistent	3 years ago