pomerium/config
Kenneth Jenkins 9d4d31cb4f
authorize: implement client certificate CRL check (#4439)
Update isValidClientCertificate() to also consult the configured
certificate revocation lists. Update existing test cases and add a new
unit test to exercise the revocation support. Restore the skipped
integration test case.

Generate new test certificates and CRLs using a new `go run`-able source
file.
2023-08-03 15:59:11 -07:00
..
envoyconfig authorize: do not rely on Envoy client cert validation (#4438) 2023-08-03 10:45:55 -07:00
testdata config: additional kubernetes token source support (#1200) 2020-08-04 09:40:51 -04:00
autocert.go remove deprecated ioutil usages (#2877) 2021-12-30 10:02:12 -08:00
autocert_test.go config: update logic for checking overlapping certificates (#4216) 2023-06-01 09:30:46 -06:00
codec_type.go config: allow specifying auto codec type in all-in-one mode (#2846) 2021-12-22 12:34:58 -07:00
codec_type_test.go config: default to http2 (#3660) 2022-10-12 14:46:06 -06:00
config.go stub out HPKE public key fetch for self-hosted authenticate (#4360) 2023-07-13 10:04:34 -07:00
config_source.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
config_source_test.go test: use T.TempDir to create temporary test directory (#3725) 2022-11-08 09:16:32 -07:00
constants.go envoy: add support for bind_config bootstrap options (#2772) 2021-12-01 13:02:49 -07:00
crypt.go cryptutil: always use kek public id, add x509 support (#2066) 2021-04-07 09:44:36 -07:00
custom.go envoy: add support for bind_config bootstrap options (#2772) 2021-12-01 13:02:49 -07:00
custom_test.go all: remove unused handler code (#2439) 2021-08-16 16:04:39 -04:00
doc.go *: remove import path comments (#545) 2020-03-16 10:13:47 -07:00
from.go config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
from_test.go config: add support for wildcard from addresses (#4131) 2023-04-25 13:34:38 -06:00
helpers.go postgres: databroker storage backend (#3370) 2022-05-25 10:23:58 -06:00
helpers_test.go databroker: rename cache service (#1790) 2021-01-21 08:41:22 -07:00
http.go use tlsClientConfig instead of custom dialer (#3830) 2022-12-27 09:55:36 -07:00
http_test.go httputil/reproxy: fix policy transport (#3322) 2022-05-04 18:32:36 -06:00
identity.go move directory providers (#3633) 2022-11-03 11:33:56 -06:00
layered.go auto tls (#3856) 2023-01-05 16:35:58 -05:00
layered_test.go auto tls (#3856) 2023-01-05 16:35:58 -05:00
log.go config: validate log levels (#4367) 2023-07-17 16:41:48 -06:00
log_level.go config: validate log levels (#4367) 2023-07-17 16:41:48 -06:00
metrics.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
metrics_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
options.go authorize: implement client certificate CRL check (#4439) 2023-08-03 15:59:11 -07:00
options_check.go add config option check logging (#3722) 2022-11-05 00:25:09 -04:00
options_test.go Allow clearing default Azure and Google auth code options (#4315) 2023-06-27 09:11:54 -07:00
policy.go config: add support for $pomerium.id_token and $pomerium.access_token in set_request_headers (#4219) 2023-06-01 16:00:02 -06:00
policy_ppl.go authorize: omit client cert rule when not needed (#4386) 2023-07-24 15:27:57 -07:00
policy_ppl_test.go authorize: omit client cert rule when not needed (#4386) 2023-07-24 15:27:57 -07:00
policy_test.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
session.go config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00
session_test.go config: allow blank identity providers when loading sessions for service account support (#3709) 2022-10-27 08:32:06 -06:00
trace.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
trace_test.go log context (#2107) 2021-04-22 10:58:13 -04:00
validate.go config: add cookie_same_site option (#4148) 2023-05-03 14:36:42 -06:00