mirror of
https://github.com/pomerium/pomerium.git
synced 2025-06-15 17:22:56 +02:00
554e77bc7c
envoy: log mtls failures This implements limited listener-based access logging for downstream transport failures, only enabled when downstream_mtls.enforcement is set to 'reject_connection'. Client certificate details and the error message will be logged. Additionally, the new key 'client-certificate' can be set in the access_log_fields list in the configuration, which will add peer certificate properties (issuer, subject, SANs) to the existing per-request http logs. --------- Co-authored-by: Kenneth Jenkins <51246568+kenjenkins@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| access.go | ||
| authorize.go | ||
| grpc.go | ||
| headers.go | ||
| headers_test.go | ||
| log.go | ||
| log_test.go | ||
| middleware.go | ||
| middleware_test.go | ||
| multiwriter.go | ||
| warnings.go | ||