212e4c2df6
Clear sessions, api-session and api-session certs because of indexing changes
2023-03-28 15:18:30 -04:00
1d0e558f90
Add support disabling routers. Fixes #1373
2023-03-28 13:42:25 -04:00
b7cd692102
Merge pull request #1377 from openziti/fix.1376.mfa.create.race.condition
...
merge check and create tx for MFA enrollment
2023-03-27 16:42:25 -04:00
6b8aa137e2
Merge pull request #1375 from openziti/fix.1374.mfa.admin.reset
...
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 16:26:05 -04:00
f274fb30f8
merge check and create tx for MFA enrollment
2023-03-27 16:13:57 -04:00
2a290612b0
fixes #1374 admins cannot delete multiple MFA enrollments
2023-03-27 15:31:49 -04:00
0a6043bb42
Fix missing entity type id on transit router. Fixes #1369
2023-03-23 23:47:54 -04:00
4057d55989
Merge pull request #1367 from openziti/fix-error-type
...
Fix error, should be invalid session, not invalid api session. Fixes #1366
2023-03-23 13:35:04 -04:00
fd8d41204a
Fix error, should be invalid session, not invalid api session. Fixes #1366
2023-03-23 10:43:52 -04:00
d76b9bc272
Cache api sessions for router/tunneler. Fixes #1364
2023-03-23 10:22:46 -04:00
2d55b5cc28
Don't delete sessions on failed terminator create
2023-03-23 09:51:14 -04:00
34cc021b3e
Make session creates idempotent. Fixes #1359
2023-03-23 09:50:05 -04:00
431df859b2
Handle duplicate tunnel terminator creation gracefully. Fixes #1355
2023-03-21 23:05:07 -04:00
e192f271ba
remove old "sessionCert" (not ApiSessionCert) bit rot
2023-03-20 18:04:21 -04:00
2f51b4acd7
reworks broker/sync connect/disconnect logic
...
- defensive checks for closed control channels
- defensive checks for duplicate/mismatch control channels
2023-03-20 15:28:09 -04:00
64d34d78dd
Merge pull request #1343 from openziti/update-fabric-dep
...
Update edge test for fabric api update
2023-03-20 09:50:54 -04:00
b09af68d09
Update edge test for fabric api update. Remove unneeded cgo import.
2023-03-17 11:55:38 -04:00
6f7945a9bf
fix test build error
2023-03-17 10:51:43 -04:00
fed450d75f
update jwks processing
2023-03-13 13:29:41 -04:00
52ed07405c
fix lint errors
2023-02-22 19:43:45 -05:00
a4caf933f6
fixes #1310 optional KID causes controller crash
2023-02-22 15:12:07 -05:00
e5f8d5ab60
Move heartbeat status map update outside bolt tx. Fixed #1303
2023-02-07 13:24:30 -05:00
5c35faafa3
Fix heartbeat deadlock. Fixes #1303
...
bbolt batch was trying to finish commit, needed all txes to finish
heartbeat update in read tx was waiting for concurrent status map so it could update
heartbeat status map was locked iterating waiting to submit to batch
(now we're back at the beginning)
Was also a view tx within a view tx, which can be problematic
2023-02-06 11:53:15 -05:00
a46a10d9eb
use new github.com/openziti/edge-api repository
...
- fixes import statements
2023-01-24 16:03:20 -05:00
69c31fcf3e
uses github.com/openziti/edge-api
...
- removes old api specific scripts, generated files, etc
2023-01-24 14:45:24 -05:00
6b6eed6041
Improve some tunneler log messages
2023-01-06 13:54:49 -05:00
7152476ced
Require config types to have a root type of object. Fixes #1279
2022-12-29 11:39:56 -05:00
56c6857590
Mark xgress_edge and xgress_edge_tunnel terminators as system entities. Fixes #1272
2022-12-16 14:04:10 -05:00
4abeaa0c0a
xgress_edge_tunnel create terminator perf improvements. Fixes #1270
...
* Make terminator creation asynchronous
* Make terminator creation idempotent
* Improve logging
* Add some timer logging and metrics.
* controller and router will both log their respective views of how long the terminator create took
* the router has a new xgress_edge_tunnel.terminator.create_time timer metric
2022-12-15 17:29:29 -05:00
c0c7b1907e
Fix eventual eventer processing on restart. Fixes #1268
2022-12-14 17:20:52 -05:00
2509f9b575
update CODEOWNERS to sig-core and update MM notifications
2022-11-30 14:34:10 -05:00
fe93c5fac6
Fix panic when improperly parsing protocol ports from ER hello. Fixes #1253
2022-11-22 11:46:27 -05:00
8563490cd8
Fix identity links. Fixes #1233 . Fixes #1234
2022-11-16 16:15:12 -05:00
185a767842
Fix links factory on identity type. Fixes #1232
2022-11-16 16:13:31 -05:00
d022405ea8
Merge pull request #1235 from openziti/fill-in-client-cert-chains
...
Fill in client cert chains when enrolling
2022-11-11 16:09:18 -05:00
90e7b0f0a6
Fill in client cert chains when enrolling
2022-11-11 14:30:55 -05:00
d73c72679d
for #1213 delete api session on authenticator delete/re-enroll
...
- an authenticator removed or re-enrolled would continue to allow old
API Session to operate
- deleted or re-enrolled authenticators now remove associatd API
Sessions
2022-11-09 11:44:49 -05:00
3e4f26ee78
updates edge service manager to not allow encryptionRequired to be
...
altered
2022-11-07 11:42:01 -05:00
5dc8a66fe9
addresses #1226 api session certificate issues w/ 3rd party cas
...
- events during a multi-step transaction were immediately emitting events
causing out of order and incomplete events to be received,
specifically API Sessions w/o fingerprints
- API Session Certificates created implicitly during 3rd Party CA auth
did not properly set all properties
- adds tests
2022-11-04 14:40:07 -04:00
30c051889a
Make error messages clearer
2022-10-25 19:02:33 -04:00
f2a2520317
Ensure disconnect handling applies to right router instance. Fixes #1217
2022-10-24 15:51:39 -04:00
63c161224a
Add linter and fix issues found by linter
2022-10-10 16:56:51 -04:00
ad8392cef4
Update deps
2022-10-10 16:56:50 -04:00
38746d39cf
Merge pull request #1188 from openziti/router-multi-ctrls
...
Support multiple routers in router edge extensions
2022-09-30 09:49:24 -04:00
63e0d9663e
Support multiple routers in router edge extensions
2022-09-30 09:34:04 -04:00
c117984c9b
Merge pull request #1190 from openziti/fix-api-session-create-race
...
Fix race condition creating api sessions from embedded tunneler. Fixe…
2022-09-29 12:29:50 -04:00
f802603d9f
fixes openziti/ziti#853
...
- fix nil 0 index x509 definition created
- updates x509-claims to v1.0.3 to fix x509 claim panics
2022-09-29 10:20:46 -04:00
d205944051
Fix race condition creating api sessions from embedded tunneler. Fixes #1189
2022-09-29 10:01:47 -04:00
b7f81ea7cb
Fix issue where lookup is expected to return err, but returns nil, causing nil reference and panic. Fixes #1186
2022-09-27 09:52:53 -04:00
32c197e5e1
Update to channel v2
2022-09-26 18:20:00 -04:00
Paul Lorenz