3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-06-30 08:28:20 +02:00
Code Issues Projects Releases Packages Wiki Activity

use tlsClientConfig instead of custom dialer

Browse source
This commit is contained in:
Denis Mishin 2022-12-23 22:10:02 -05:00
parent 753eeff12f
commit bfadf123d5
6 changed files with 52 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

7
proxy/state.go
View file

@ -3,6 +3,7 @@ package proxy
import (
"context"
"crypto/cipher"
"net/http"
"net/url"
"github.com/pomerium/pomerium/config"
@ -61,9 +62,13 @@ func newProxyStateFromConfig(cfg *config.Config) (*proxyState, error) {
if err != nil {
return nil, err
}
tlsConfig, err := cfg.GetTLSClientConfig()
if err != nil {
return nil, err
}
state.authenticateKeyFetcher = hpke.NewKeyFetcher(authenticateURL.ResolveReference(&url.URL{
Path: "/.well-known/pomerium/jwks.json",
}).String())
}).String(), &http.Transport{TLSClientConfig: tlsConfig, ForceAttemptHTTP2: true})
state.sharedCipher, err = cryptutil.NewAEADCipher(state.sharedKey)
if err != nil {