3pp-mirror/pomerium
1
0
Fork 0
mirror of https://github.com/pomerium/pomerium.git synced 2025-07-19 09:38:03 +02:00
Code Issues Projects Releases Packages Wiki Activity
pomerium/config
History
Kenneth Jenkins 5568606f03
config: support client certificate SAN match (#4453) 
Add a new match_subject_alt_names option to the downstream_mtls settings
group. This setting can be used to further constrain the allowed client
certificates by requiring that certificates contain a Subject
Alternative Name of a particular type, matching a particular regex.

When set, populate the corresponding match_typed_subject_alt_names
setting within Envoy, and also implement a corresponding check in the
authorize service.
2023-08-11 13:27:12 -07:00
..
envoyconfig config: support client certificate SAN match (#4453) 2023-08-11 13:27:12 -07:00
testdata
autocert.go
autocert_test.go config: update logic for checking overlapping certificates (#4216) 2023-06-01 09:30:46 -06:00
codec_type.go
codec_type_test.go config: default to http2 (#3660) 2022-10-12 14:46:06 -06:00
config.go stub out HPKE public key fetch for self-hosted authenticate (#4360) 2023-07-13 10:04:34 -07:00
config_source.go config: move mTLS settings to new struct (#4442) 2023-08-08 10:22:48 -07:00
config_source_test.go test: use T.TempDir to create temporary test directory (#3725) 2022-11-08 09:16:32 -07:00
constants.go
crypt.go
custom.go
custom_test.go
doc.go
from.go config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
from_test.go config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
helpers.go postgres: databroker storage backend (#3370) 2022-05-25 10:23:58 -06:00
helpers_test.go
http.go use tlsClientConfig instead of custom dialer (#3830) 2022-12-27 09:55:36 -07:00
http_test.go httputil/reproxy: fix policy transport (#3322) 2022-05-04 18:32:36 -06:00
identity.go move directory providers (#3633) 2022-11-03 11:33:56 -06:00
layered.go auto tls (#3856) 2023-01-05 16:35:58 -05:00
layered_test.go auto tls (#3856) 2023-01-05 16:35:58 -05:00
log.go config: validate log levels (#4367) 2023-07-17 16:41:48 -06:00
log_level.go config: validate log levels (#4367) 2023-07-17 16:41:48 -06:00
metrics.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
metrics_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
mtls.go config: support client certificate SAN match (#4453) 2023-08-11 13:27:12 -07:00
mtls_test.go config: support client certificate SAN match (#4453) 2023-08-11 13:27:12 -07:00
options.go config: move mTLS settings to new struct (#4442) 2023-08-08 10:22:48 -07:00
options_check.go add config option check logging (#3722) 2022-11-05 00:25:09 -04:00
options_test.go config: extra CA and CRL validation (#4455) 2023-08-10 16:15:11 -07:00
policy.go config: add support for $pomerium.id_token and $pomerium.access_token in set_request_headers (#4219) 2023-06-01 16:00:02 -06:00
policy_ppl.go authorize: omit client cert rule when not needed (#4386) 2023-07-24 15:27:57 -07:00
policy_ppl_test.go authorize: omit client cert rule when not needed (#4386) 2023-07-24 15:27:57 -07:00
policy_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
session.go config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00
session_test.go config: allow blank identity providers when loading sessions for service account support (#3709) 2022-10-27 08:32:06 -06:00
trace.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
trace_test.go
validate.go config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00