You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Dhia Ayachi 58bd817336 check expiry date of the root/intermediate before using it to sign a leaf (#10500) ... * ca: move provider creation into CAManager This further decouples the CAManager from Server. It reduces the interface between them and removes the need for the SetLogger method on providers. * ca: move SignCertificate to CAManager To reduce the scope of Server, and keep all the CA logic together * ca: move SignCertificate to the file where it is used * auto-config: move autoConfigBackend impl off of Server Most of these methods are used exclusively for the AutoConfig RPC endpoint. This PR uses a pattern that we've used in other places as an incremental step to reducing the scope of Server. * fix linter issues * check error when `raftApplyMsgpack` * ca: move SignCertificate to CAManager To reduce the scope of Server, and keep all the CA logic together * check expiry date of the intermediate before using it to sign a leaf * fix typo in comment Co-authored-by: Kyle Havlovitz <kylehav@gmail.com> * Fix test name * do not check cert start date * wrap error to mention it is the intermediate expired * Fix failing test * update comment Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> * use shim to avoid sleep in test * add root cert validation * remove duplicate code * Revert "fix linter issues" This reverts commit 6356302b54. * fix import issue * gofmt leader_connect_ca * add changelog entry * update error message Co-authored-by: Freddy <freddygv@users.noreply.github.com> * fix error message in test Co-authored-by: Daniel Nephin <dnephin@hashicorp.com> Co-authored-by: Kyle Havlovitz <kylehav@gmail.com> Co-authored-by: Freddy <freddygv@users.noreply.github.com>		3 years ago
..
ca	check expiry date of the root/intermediate before using it to sign a leaf (#10500)	3 years ago
authz.go	Replace CertURI.Authorize() calls.	4 years ago
authz_test.go	Replace CertURI.Authorize() calls.	4 years ago
common_names.go	connect/ca: cease including the common name field in generated certs (#10424)	3 years ago
csr.go	connect/ca: cease including the common name field in generated certs (#10424)	3 years ago
generate.go	connect: add validations around intermediate cert ttl (#7213)	5 years ago
generate_test.go	testing: skip slow tests with -short	4 years ago
parsing.go	Fix support for RSA CA keys in Connect. (#6638)	5 years ago
sni.go	connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340)	5 years ago
sni_test.go	connect: generate the full SNI names for discovery targets in the compiler rather than in the xds package (#6340)	5 years ago
testing_ca.go	ca: remove unused RotationPeriod field	3 years ago
testing_ca_test.go	testing: skip slow tests with -short	4 years ago
testing_spiffe.go	connect: Add logic for updating secondary DC intermediate on config set	4 years ago
uri.go	Merge pull request #10560 from jkirschner-hashicorp/change-sane-to-reasonable	3 years ago
uri_agent.go	connect: include optional partition prefixes in SPIFFE identifiers (#10507)	3 years ago
uri_agent_oss.go	connect: include optional partition prefixes in SPIFFE identifiers (#10507)	3 years ago
uri_agent_oss_test.go	connect: include optional partition prefixes in SPIFFE identifiers (#10507)	3 years ago
uri_service.go	connect: include optional partition prefixes in SPIFFE identifiers (#10507)	3 years ago
uri_service_oss.go	connect: include optional partition prefixes in SPIFFE identifiers (#10507)	3 years ago
uri_service_oss_test.go	connect: include optional partition prefixes in SPIFFE identifiers (#10507)	3 years ago
uri_signing.go	connect: include optional partition prefixes in SPIFFE identifiers (#10507)	3 years ago
uri_signing_test.go	connect: include optional partition prefixes in SPIFFE identifiers (#10507)	3 years ago
uri_test.go	connect: include optional partition prefixes in SPIFFE identifiers (#10507)	3 years ago
x509_patch.go	connect/ca: cease including the common name field in generated certs (#10424)	3 years ago
x509_patch_test.go	connect/ca: cease including the common name field in generated certs (#10424)	3 years ago