pomerium/authorize/evaluator
Kenneth Jenkins cc1ef1ae18
cryptutil: update CRL parsing (#4454)
Move the parseCRLs() method from package 'authorize/evaluator' to
'pkg/cryptutil', replacing the existing DecodeCRL() method. This method
will parse all CRLs found in the PEM input, rather than just the first.

(This removes our usage of the deprecated method x509.ParseDERCRL.)

Update this method to return an error if there is non-PEM data found in
the input, to satisfy the existing test that raw DER-encoded CRLs are
not permitted.

Delete the CRLFromBase64() and CRLFromFile() methods, as these are no
longer used.
2023-08-11 08:33:22 -07:00
..
opa authorize: client cert fingerprint in set_request_headers (#4447) 2023-08-09 08:34:51 -07:00
config.go config: add support for max_verify_depth (#4452) 2023-08-10 10:05:48 -07:00
evaluator.go config: add support for max_verify_depth (#4452) 2023-08-10 10:05:48 -07:00
evaluator_test.go config: add new mTLS enforcement setting (#4443) 2023-08-09 07:53:11 -07:00
functions.go cryptutil: update CRL parsing (#4454) 2023-08-11 08:33:22 -07:00
functions_test.go config: add support for max_verify_depth (#4452) 2023-08-10 10:05:48 -07:00
gen-test-certs.go authorize: allow client certificate intermediates (#4451) 2023-08-10 09:33:29 -07:00
google_cloud_serverless.go config: remove source, remove deadcode, fix linting issues (#4118) 2023-04-21 17:25:11 -06:00
google_cloud_serverless_test.go authorize: move headers and jwt signing to rego (#1856) 2021-02-08 10:53:21 -07:00
headers_evaluator.go authorize: client cert fingerprint in set_request_headers (#4447) 2023-08-09 08:34:51 -07:00
headers_evaluator_test.go authorize: allow client certificate intermediates (#4451) 2023-08-10 09:33:29 -07:00
policy_evaluator.go config: add new mTLS enforcement setting (#4443) 2023-08-09 07:53:11 -07:00
policy_evaluator_test.go config: add new mTLS enforcement setting (#4443) 2023-08-09 07:53:11 -07:00