f02d31aed8
Update deps and adjust for update channel API
2022-03-11 13:20:17 -05:00
ce3b70ce2f
Update for link changes
2022-03-07 14:23:35 -05:00
ada7cdd348
Updating test to work with the latest global config constants
2022-03-03 15:14:19 -05:00
3e5f08c99f
adds cert authenticator extension endpoint
...
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend
- adds endpoint POST /edge/management/v1/authenticator/{id}/extend-verify
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend
- adds endpoint POST /edge/client/v1/authenticator/{id}/extend-verify
- add logic that allows a client endpoint to extend the valid period for
their current certificate authenticator
- requires clients to use their existing client cetificate for extension
- requires clients to verify they have received the new public key
- allows clients to use a new private key if desired
- allows only 1st party certificate authenticators to extend
- adds authenticatorId to apiSession for persistence, model, api model
- add session cert to already authenticated session on extend
- removes empty test stub
2022-03-02 09:20:08 -05:00
abec09180f
Fix cert checker tests to account for daylight savings time
2022-02-17 13:44:13 -05:00
06679b93a9
Remove fabric callback that are no longer needed
2022-02-17 11:13:15 -05:00
f14ff5e0ed
Update xgress edge to updated channel library/api
2022-01-31 22:24:38 -05:00
a6428df622
Update for channel api and xgress api updates
2022-01-31 15:55:19 -05:00
3b75094429
Update router side to use channel library for control channel
2022-01-28 15:48:15 -05:00
5be9095e60
Update to use channel library
2022-01-28 11:35:15 -05:00
fd866e7f3d
Cache tunnel sessions in LRU cache to avoid creating extraneous sessions
2022-01-13 12:38:54 -05:00
97773f5917
update log messages w/ router context
2021-12-20 09:20:10 -05:00
dae084f61c
alters router/controller enrollment extension logic
...
- routers propertly wait on certs that are about to expire
- routers no longer send multiple extension requests
- routers now request cert verification
- routers now verify new certs before saving
- controller now supports verification requests
2021-12-20 09:19:10 -05:00
66638077b4
More logging tidying around terminators
2021-12-15 13:05:55 -05:00
c5c2af9737
Only match terminator if the id also matches
2021-12-11 00:35:24 -05:00
bfcb037783
Initial pass at fabric rest api working ( #838 )
...
* Update for fabric rest controller changes
2021-11-30 16:30:17 -05:00
62ae85539f
Merge pull request #819 from openziti/gosec.improvements
...
fixes gosec output of a few items
2021-11-02 09:05:22 -04:00
91badfd2e8
make xgress_geneve compile on MacOS ( #820 )
2021-10-22 13:57:41 -04:00
c8de8a8fac
fixes gosec output of a few items
2021-10-21 17:40:52 -04:00
9c89cb08c2
fix enrollment issues if no previous enrollment exists
2021-10-19 11:25:56 -04:00
6612ad9c14
fix startup timing issues
2021-10-19 10:58:59 -04:00
a829f3ae27
fix bad merges w/ build flags on geneve
2021-10-18 16:13:17 -04:00
58fa1887a9
remove debug flag
2021-10-18 16:11:01 -04:00
45158ff864
updates to newest foundation/fabric/sdk-golang
2021-10-18 16:07:33 -04:00
99f3102c27
linux filename update
2021-10-13 23:50:50 -04:00
57ff51ff78
added empty gemeve listener for darwin and windows
2021-10-13 23:48:03 -04:00
202fbce026
Update missed hop id. Save hopIds for entity ids
2021-10-12 09:37:37 -04:00
846aae9ec3
Update deps. Only use hopId for entity ids
2021-10-11 22:28:55 -04:00
d0de60901c
Add xgress control/traceroute support
2021-10-11 22:28:53 -04:00
7863a75913
added geneve proxy xgress ( #799 )
...
* added geneve proxy xgress
2021-10-11 12:39:05 -04:00
9fe3898b59
Merge pull request #776 from openziti/set.min.tls.for.enrollment.request
...
sets the min tls version to 1.2 for enrollment
2021-09-14 09:41:23 -04:00
507ab8aaa2
sets the min tls version to 1.2 for enrollment
2021-09-13 09:38:50 -04:00
12117a0ded
Sending service precedences and cost set on identity to ERT
2021-09-10 17:20:46 -04:00
82f4621393
Allow ERT to gracefully handle api session/session removal. Can happen if router is disconnected, but not down for an extended period
2021-09-03 13:28:43 -04:00
de54568423
More session -> circuit fixes. Fix patch on service edge router policy when semantic isn't set
2021-08-10 13:18:24 -04:00
23c98c2d5a
Add more tracing and allow enabling debug for specific identities for path selection/establishment
2021-08-09 11:20:51 -04:00
b82b92684b
Rename fabric session to circuit
2021-08-04 14:39:27 -04:00
5baee1a3f2
Remove unused api session fields
2021-08-03 16:02:36 -04:00
2a56ce2380
Update test for api changes
2021-08-03 09:16:22 -04:00
8a1b118ed2
Fix init example and add log on successful terminator create
2021-07-29 09:27:02 -04:00
d7c1dc038d
Allow searching on role sets
2021-07-15 09:35:41 -04:00
3151d31b7f
Handle xweb import change ( #697 )
...
* Handle xweb import change. Fix tunnel update/delete terminator handling
2021-06-22 14:18:17 -04:00
ace44b4e75
Fix panic. Fix generate rest script. Add metric for unknown api session tokens
2021-06-21 15:17:46 -04:00
d920dbbd93
Fix sync early exit bug. Track new session during sync. Simplify thre… ( #686 )
...
* Fix sync early exit bug. Track new session during sync. Simplify threading and tighten up locking. Add dump api-sessions debug operation
* Address review comments. Remove spurious error message. Fix defaultHostingCost/Precedence field names
2021-06-11 14:01:20 -04:00
ad9f0f2d72
Make sure identity host data makes it to the tunneler
2021-06-04 16:41:23 -04:00
025cfc204d
Move service list handler invoke out of decode loop
2021-05-06 13:00:48 -04:00
4b370e1522
Implement dialoption identity template
2021-05-04 15:34:37 -04:00
369ea5de0f
listener.close already cleaned up interceptor. don't need to do it again
2021-04-30 09:31:26 -04:00
881a0a45b2
Handle tunneler cleanup on shutdown
2021-04-29 16:37:26 -04:00
2a2e380cb7
Add error code reporting to control channel requests
2021-04-19 14:22:07 -04:00
Paul Lorenz