3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-06-21 20:18:06 +02:00
Code Issues Projects Releases Packages Wiki Activity

envoyconfig: fix tls_downstream_client_ca for non-standard ports (#2802)

Browse source
This commit is contained in:
Caleb Doxsey 2021-12-08 10:48:52 -07:00 • committed by GitHub
parent 8331db9a26
commit d0890d399c
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
config/envoyconfig/listeners.go
View file

@ -853,7 +853,7 @@ func hostMatchesDomain(u *url.URL, host string) bool {
func getPoliciesForDomain(options *config.Options, domain string) []config.Policy { func getPoliciesForDomain(options *config.Options, domain string) []config.Policy {
var policies []config.Policy var policies []config.Policy
for _, p := range options.GetAllPolicies() { for _, p := range options.GetAllPolicies() {
if p.Source != nil && hostMatchesDomain(p.Source.URL, domain) { if p.Source != nil && p.Source.URL.Hostname() == domain {
policies = append(policies, p) policies = append(policies, p)
} }
} }

2
config/envoyconfig/listeners_test.go
View file

@ -604,7 +604,7 @@ func Test_buildDownstreamTLSContext(t *testing.T) {
Key: aExampleComKey, Key: aExampleComKey,
Policies: []config.Policy{ Policies: []config.Policy{
{ {
Source: &config.StringURL{URL: mustParseURL(t, "https://a.example.com")}, Source: &config.StringURL{URL: mustParseURL(t, "https://a.example.com:1234")},
TLSDownstreamClientCA: "TEST", TLSDownstreamClientCA: "TEST",
}, },
}, },