Philip O'Toole
ec939ec383
More ABL
2 years ago
Philip O'Toole
a601801c6d
ABL
2 years ago
Philip O'Toole
bf22fa5743
Even better variable names
2 years ago
Philip O'Toole
f7946502b4
Clearer variable names for HTTP x509
2 years ago
Philip O'Toole
11ed5731d6
Fix up x509 command-line flags
2 years ago
Philip O'Toole
ba39227c93
Move to a single cert-key pair for nodes
2 years ago
Philip O'Toole
50d70b547e
Fix system-level tests
2 years ago
Philip O'Toole
a3fc60b9b5
Fix last TCP dialer test
2 years ago
Philip O'Toole
54e649c341
More TLS unit test fixes
2 years ago
Philip O'Toole
de0d0f63ad
Fix HTTP no-verify of client certs
2 years ago
Philip O'Toole
e3698807a0
Update help
2 years ago
Philip O'Toole
673fd8cade
More use of central TLS config
2 years ago
Philip O'Toole
c8231596ac
Use central TLS config creation
2 years ago
Philip O'Toole
d8cf1ec2e9
Package-level GoDoc
2 years ago
Philip O'Toole
9e1f6c0a76
tls -> rtls
2 years ago
Philip O'Toole
eaeb4bd073
Rename tls package to rtls
2 years ago
Philip O'Toole
306147862a
Centralize TLS config helpers
2 years ago
Philip O'Toole
cf29dd106a
More flag options
2 years ago
Philip O'Toole
da3079bec9
Better flags help
2 years ago
Philip O'Toole
7af5666056
Actually enable inter-node client cert checking
2 years ago
Philip O'Toole
9ce28ca5a1
Fix TLS tests
2 years ago
Philip O'Toole
8225ff838c
Fix mutual TLS testing
...
All certs in chain needed to have ExtKeyUsageClientAuth set.
2 years ago
Philip O'Toole
6dbe180bff
Confirm everything works when verify=false
...
But this isn't affecting the HTTP server, so fails client verification.
HTTP TLS config getting complicated, feels like it needs a dedicated
config object now.
2 years ago
Philip O'Toole
7852b27dcb
mTLS unit tests
...
Client cert not trusted yet.
2 years ago
Philip O'Toole
05a7663a93
Actually enable HTTP client cert verification
2 years ago
Philip O'Toole
39259bca8a
Start mutual TLS testing
...
Lots of boilerplate moving from PEMs, to certs, to bytes. Factor it out.
2 years ago
Philip O'Toole
eab0fc60ee
Fix test
2 years ago
Philip O'Toole
5a7a2f3102
Start testing with on-the-fly certs
2 years ago
Philip O'Toole
828acadb0c
Move HTTP TLS testing to own file
2 years ago
Philip O'Toole
22755d7136
Remove rogue file
2 years ago
Philip O'Toole
fed557c77a
More cleanup
2 years ago
Philip O'Toole
220c3f9243
More tidy-up
2 years ago
Philip O'Toole
197b59d481
Tidy up
2 years ago
Philip O'Toole
be44683dfa
Initial TLS utilities
2 years ago
Philip O'Toole
fdb97ff1ba
Merge pull request #1164 from rqlite/go-120
...
CircleCI testing using Go 1.20
2 years ago
Philip O'Toole
2509dc3f7e
More gofmt
2 years ago
Philip O'Toole
57c416e8df
gofmt fixes
2 years ago
Philip O'Toole
7f423657e5
CircleCI testing using Go 1.20
2 years ago
Philip O'Toole
524c810014
Delete index.html
2 years ago
Philip O'Toole
94b4d75412
Update CHANGELOG.md
2 years ago
Philip O'Toole
37beb59c68
Merge pull request #1163 from rqlite/gm-02232023
...
go mod updates
2 years ago
Philip O'Toole
561801c68b
Upgrade raft BoltDB fork
2 years ago
Philip O'Toole
a310924440
CHANGELOG
2 years ago
Philip O'Toole
2005d94ad7
go mod updates
2 years ago
Philip O'Toole
be4fb3b26f
Merge pull request #1162 from rqlite/consul-fix-tls
...
Upgrade disco client
2 years ago
Philip O'Toole
4f0b82eb85
Update CHANGELOG
2 years ago
Philip O'Toole
b0d1593785
Upgrade disco client
...
Pull in https://github.com/rqlite/rqlite-disco-clients/pull/12
2 years ago
Philip O'Toole
51e56fe0de
Update README.md
2 years ago
Philip O'Toole
05d782b26e
Update CHANGELOG.md
2 years ago
Philip O'Toole
32f4660c2c
Update CHANGELOG.md
2 years ago