mirror of
https://github.com/pomerium/pomerium.git
synced 2025-04-30 10:56:28 +02:00
envoy: log mtls failures This implements limited listener-based access logging for downstream transport failures, only enabled when downstream_mtls.enforcement is set to 'reject_connection'. Client certificate details and the error message will be logged. Additionally, the new key 'client-certificate' can be set in the access_log_fields list in the configuration, which will add peer certificate properties (issuer, subject, SANs) to the existing per-request http logs. --------- Co-authored-by: Kenneth Jenkins <51246568+kenjenkins@users.noreply.github.com> |
||
---|---|---|
.. | ||
xdsmgr | ||
events.go | ||
events_test.go | ||
grpc_accesslog.go | ||
grpc_accesslog_test.go | ||
http.go | ||
server.go | ||
server_test.go | ||
xds.go |