Dave Kempe df402944f3 v0.6.2: Fix mTLS identity parsing (#51), decouple server/guacd TLS (#49) ...

- Rewrite Vault mTLS client to build rustls ClientConfig directly,
  bypassing reqwest::Identity::from_pem() which fails with rustls
  backend for PKCS#8 keys from OpenBao/Vault PKI
- Make cert_path/key_path optional in [tls] — guacd TLS now works
  independently of server HTTPS (for reverse proxy setups)
- Add webpki-roots direct dependency for custom TLS config
- Add mTLS tests: PKCS#8 key, fullchain cert, tls_skip_verify
- Update docs: configuration.md, security.md

Closes #51, closes #49

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-11 07:37:45 +11:00

..

api.rs

v0.6.1: Vault mTLS support, comprehensive test suite (87 tests)

2026-03-10 11:44:46 +11:00

auth.rs

v0.6.1: Vault mTLS support, comprehensive test suite (87 tests)

2026-03-10 11:44:46 +11:00

browser.rs

v0.6.1: Vault mTLS support, comprehensive test suite (87 tests)

2026-03-10 11:44:46 +11:00

config.rs

v0.6.2: Fix mTLS identity parsing (#51), decouple server/guacd TLS (#49)

2026-03-11 07:37:45 +11:00

db.rs

v0.6.1: Vault mTLS support, comprehensive test suite (87 tests)

2026-03-10 11:44:46 +11:00

drive.rs

Initial public release

2026-02-06 14:38:53 +11:00

guacd.rs

v0.6.0: Web autofill, domain allowlisting, clipboard control, Guacamole import

2026-03-07 00:54:26 +11:00

import.rs

Fix clippy warnings in import.rs for CI

2026-03-10 11:49:33 +11:00

lib.rs

Add fuzz testing infrastructure and fix UTF-8 boundary panic

2026-02-07 13:39:16 +11:00

main.rs

v0.6.2: Fix mTLS identity parsing (#51), decouple server/guacd TLS (#49)

2026-03-11 07:37:45 +11:00

oidc.rs

Security hardening: open redirect, cookie flags, constant-time auth, fuzz targets

2026-02-12 08:42:33 +11:00

protocol.rs

Add Default derive for InstructionParser (clippy fix)

2026-02-07 14:21:40 +11:00

recording.rs

Add RDP RemoteApp/RAIL, recording rotation, per-entry recording overrides

2026-02-14 10:39:25 +11:00

session.rs

v0.6.1: Vault mTLS support, comprehensive test suite (87 tests)

2026-03-10 11:44:46 +11:00

tunnel.rs

Bump russh 0.49 → 0.54 (CVE-2025-54804), drop russh-keys and async-trait

2026-02-11 08:48:15 +11:00

vault.rs

v0.6.2: Fix mTLS identity parsing (#51), decouple server/guacd TLS (#49)

2026-03-11 07:37:45 +11:00

websocket.rs

v0.5.0: Theme system, ARM64 builds, Docker fixes, dependency updates

2026-03-01 15:05:41 +11:00