mirror of
https://github.com/pomerium/pomerium.git
synced 2025-07-07 03:48:17 +02:00
Add a new max_verify_depth option to the downstream_mtls settings group, with a default value of 1 (to match the behavior of current Pomerium releases). Populate the corresponding setting within Envoy, and also implement a depth check within isValidClientCertificate() in the authorize service. |
||
---|---|---|
.. | ||
opa | ||
config.go | ||
evaluator.go | ||
evaluator_test.go | ||
functions.go | ||
functions_test.go | ||
gen-test-certs.go | ||
google_cloud_serverless.go | ||
google_cloud_serverless_test.go | ||
headers_evaluator.go | ||
headers_evaluator_test.go | ||
policy_evaluator.go | ||
policy_evaluator_test.go |