ea20cc35d1
Give tls session ticket key fields better names. ( #186 )
...
oneof doesn't provide any namespace scoping, so the names looked
too generic where they're used in implementations.
Signed-off-by: Greg Greenway ggreenway@apple.com
7 years ago
e14661aa93
Add configuration for TLS session ticket encryption key, to allow ( #178 )
...
session resumption across hot-restart or between multiple envoy
instances.
Signed-off-by: Greg Greenway ggreenway@apple.com
7 years ago
daec566748
sds: secret discovery service. ( #180 )
...
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
7 years ago
b9e89d760d
tls: allow multiple client certificates. ( #163 )
...
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
7 years ago
76725fcc28
tls: add require_sni. ( #164 )
...
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
7 years ago
38beaebcda
tls: add support for password-protected private keys. ( #162 )
...
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
7 years ago
9f67e08a1a
tls: s/ca_cert/trusted_ca/. ( #161 )
...
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
7 years ago
f76f45f5d4
tls: s/cert_chain/certificate_chain/. ( #160 )
...
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
7 years ago
86de1f2575
lds: use_original_dst support and some fixups for JSON -> proto translation. ( #143 )
7 years ago
edea204fc8
tls_context: refactor common TLS context for downstream/upstream into shared message. ( #118 )
...
Also add deprecated support for alt_alpn_protocols.
7 years ago
8e09349c27
TLS: add ability to hash SPKI instead of certificate. ( #44 )
...
SPKI doesn't change when certificate is reissued, so it works better
with short-lived certificates.
This is also the same format as used in HTTP Public Key Pinning.
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
8 years ago
a8b5fe0007
Replace google.protobuf.{String,Byte}Value with string. ( #31 )
...
As previously pointed out in #9 , the empty string is not generally a useful
value in the xDS APIs, so can be be considered equivalent to an unset
field. This is now documented in principles in #28 as well.
Also replace google.protobuf.BytesValue with bytes.
8 years ago
ed5303dc27
Package namespace versioning for v2 API. ( #30 )
...
Generalizes #9 .
Fixes #7 .
8 years ago
ba218d6a26
TLS: move TlsParameters to the first field. ( #12 )
...
This makes more sense, from the TLS handshake point of view.
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
8 years ago
be872a4113
API: s/SSL/TLS/g. ( #10 )
...
Signed-off-by: Piotr Sikora <piotrsikora@google.com>
8 years ago
f2250e84d1
Draft CDS API. ( #8 )
...
The idea here is to get into the repository something with reasonable
fidelity to the early drafts that have been floated.
8 years ago
Greg Greenway
Piotr Sikora
htuch