From 5dfabf5cc2d15750c5d095e83966bf6b85bc2989 Mon Sep 17 00:00:00 2001 From: Andrew Martinez Date: Thu, 7 Jan 2021 13:55:35 -0500 Subject: [PATCH] Update edge deps - adds loging improvements for edge router connections w/ invalid API Session Tokens - adds API Session Certificates --- CHANGELOG.md | 33 +++++++++++++++++++++++++++++++++ go.mod | 2 +- go.sum | 6 ++---- 3 files changed, 36 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 93bc8d257..6acf01540 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,36 @@ +# Release 0.18.1 + +* Improve log output for invalid API Session Tokens used to connect to Edge Routers +* Logs default to no color output +* API Session Certificate Support Added + +### Logs default to no color output + +Logs generated by Ziti components written in Go (Controller, Router, SDK) will +no longer output ANSI color control characters by default. Color logs can be +enabled by setting in the environment variable `PFXLOG_USE_COLOR` to any +truthy value: 1, t, T, TRUE, true, True, 0, f, F, FALSE, false, False. + +### API Session Certificate Support Added + +All authentication mechanisms can now bootstrap key pairs via an authenticated session +using API Session Certificates. These key pairs involve authenticating, preparing an +X509 Certificate Signing Request (CSR), and then submitting the CSR for processing. +The output is an ephemeral certificate tied to that session that can be used to +connect to Edge Routers for session dial/binds. + +New Endpoints: +- current-api-session/certificates + - GET - lists current API Session Certificates + - POST - create a new API Session Certificate (accepts a JSON payload with a `csr` field) +- current-api-session/certificates/ + - GET - retrieves a specific API Session Certificate + - DELETE - removes a specific API Session Certificate + - + +API Session Certificates have a 12hr life span. New certificates can be created +before previous ones expire and be used for reconnection. + # Release 0.18.0 ## What's New diff --git a/go.mod b/go.mod index 26988c3b3..067969e12 100644 --- a/go.mod +++ b/go.mod @@ -24,7 +24,7 @@ require ( github.com/influxdata/influxdb1-client v0.0.0-20191209144304-8bf82d3c094d github.com/keybase/go-ps v0.0.0-20190827175125-91aafc93ba19 github.com/michaelquigley/pfxlog v0.3.1 - github.com/openziti/edge v0.17.28 + github.com/openziti/edge v0.17.30 github.com/openziti/fabric v0.15.5 github.com/openziti/foundation v0.14.24 github.com/openziti/sdk-golang v0.15.2 diff --git a/go.sum b/go.sum index 3a2529bbb..24cb78fa5 100644 --- a/go.sum +++ b/go.sum @@ -452,8 +452,6 @@ github.com/michaelquigley/dilithium v0.2.0 h1:JNVb9ckXDTAxYVpPHPzkBuXObh0TYymuZg github.com/michaelquigley/dilithium v0.2.0/go.mod h1:MIqCw2+ObUwmS7G+8N8hWiwNMjItUEBzeTlipmiZqOw= github.com/michaelquigley/pfxlog v0.0.0-20190813191113-2be43bd0dccc h1:PQrqw9XKYcPRI9rKwoGZucMjWvfZpyfb5j8Lc13j8YY= github.com/michaelquigley/pfxlog v0.0.0-20190813191113-2be43bd0dccc/go.mod h1:Z0K0l/NScHvLeGoy4SZTps+ZxGv85ql4AvZqTqOxBY8= -github.com/michaelquigley/pfxlog v0.3.0 h1:rekOTtAL6TwVVuSQ1dlyxvR+nL/2VscvmAcw2Ayk1GA= -github.com/michaelquigley/pfxlog v0.3.0/go.mod h1:pwJmJ9nN787xk9U+0z8/5nP2GMhU6GGCTfgBWGpiXaQ= github.com/michaelquigley/pfxlog v0.3.1 h1:MwDUlWURv5b8jfAzi2D5tcr8yg3ZDgH2uPI/+faucaQ= github.com/michaelquigley/pfxlog v0.3.1/go.mod h1:pwJmJ9nN787xk9U+0z8/5nP2GMhU6GGCTfgBWGpiXaQ= github.com/microcosm-cc/bluemonday v1.0.1/go.mod h1:hsXNsILzKxV+sX77C5b8FSuKF00vh2OMYv+xgHpAMF4= @@ -509,8 +507,8 @@ github.com/onsi/gomega v1.8.1/go.mod h1:Ho0h+IUsWyvy1OpqCwxlQ/21gkhVunqlU8fDGcoT github.com/onsi/gomega v1.10.1 h1:o0+MgICZLuZ7xjH7Vx6zS/zcu93/BEp1VwkIW1mEXCE= github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo= github.com/openzipkin/zipkin-go v0.1.1/go.mod h1:NtoC/o8u3JlF1lSlyPNswIbeQH9bJTmOf0Erfk+hxe8= -github.com/openziti/edge v0.17.28 h1:oW1iEwEl9eCQvTlE6sfwYEY/hRWKPwVqlMYrjBtlNnA= -github.com/openziti/edge v0.17.28/go.mod h1:jkGzkuu5vZ8XgqddxZjmzDU2OjtU/7N0/5x7vXaouLI= +github.com/openziti/edge v0.17.30 h1:cS33nStCVU0clVPzoEkkrEP8miMGH8v+8d8ZXq0uc78= +github.com/openziti/edge v0.17.30/go.mod h1:jkGzkuu5vZ8XgqddxZjmzDU2OjtU/7N0/5x7vXaouLI= github.com/openziti/fabric v0.15.5 h1:qaHsjkoGLb+0lHEmvZPSYnR5jKhdh59k3O4xYSzAkEM= github.com/openziti/fabric v0.15.5/go.mod h1:A31vRi5JrbNw1mHOnNMTEDID5ga2kKyTD6TzzUqA5rQ= github.com/openziti/foundation v0.14.24 h1:bJ9Ni/QecYDx0tNS7tXzdF1789dI/87F9NzUisjpfBY=