a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
4498318767
Make query parse errors into ApiErrors so they're not 500 errors ( #443 )
2020-12-16 11:30:51 -05:00
7329106691
Use manual start for tunnel hosting
2020-12-16 11:08:06 -05:00
5c70087d98
adds GET /protocols to the Edge Rest API
2020-11-20 17:52:05 -05:00
f5e0e1f25e
fixes #424 allow non-admins to list service terminators
2020-11-20 09:46:44 -05:00
5ba7af91eb
add lower normalization that was removed back
2020-11-11 21:34:44 -05:00
6ad6b3264c
fixes #403
...
Process posture responses now allow an array of digital signer
fingerprints to be submitted and checked.
2020-11-11 21:31:17 -05:00
108b657044
fix missing dangling period in os posture test
2020-11-11 20:51:54 -05:00
48a3f5dc0b
remove unused function
2020-11-11 20:39:35 -05:00
4631fe1452
fixes #401
...
Valid x.y.z versions of OS posture checks can now be specified by
posture check ranges.
2020-11-11 20:32:48 -05:00
a80b27afe6
fix test based on pr
2020-11-11 19:11:05 -05:00
e0cf6a7ea5
fixes #397 and fixes #398
...
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
2ecdb921a9
fix process checks
2020-11-10 16:03:56 -05:00
84225d2796
fixes #394
...
In scenarios where a service has no policies with any checks after
initialization, the posture checks would fail incorrectly.
2020-11-10 14:50:23 -05:00
428135c4ad
fix empty session type
2020-11-05 21:23:49 -05:00
e859ce6a67
filter posture check sets by bind type
2020-11-05 19:40:27 -05:00
53f702c212
Merge pull request #369 from openziti/add.online.status
...
Add.online.status
2020-10-31 08:35:39 -04:00
394a844878
fixes for mop/sdks
...
- case insensitive checks for domain/os
- no minimum mac addresses on posture responses
2020-10-30 14:13:43 -04:00
ac187ffa99
posture check implementation
...
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
4bb404e953
Ziti tunnel.cfgtype.v2.0 ( #357 )
...
* add client.v2.0 tunneler configuration type.
* renamed cfgtype
* set db version to 14
* added host.v1 configuration type
2020-10-26 12:14:29 -04:00
7cc95e3456
fixes #372 ensures v13 dbs have posture check types
...
- adds posture check types to init
- on v12/v13 migrations, posture check types are checked and added if
necessary
2020-10-21 11:40:06 -04:00
c726f158d6
fixes #365 adds hasApiSession and hasEdgeRouterConnection
2020-10-20 15:00:22 -04:00
129bff6d8f
Merge pull request #348 from openziti/terminator.binding.required
...
make binding required on terminators
2020-10-14 14:43:42 -04:00
73dc0f3b0b
Narrow json types for list items ( #346 )
...
* Narrow json types for list items
2020-10-14 11:17:55 -04:00
9216db9b0a
make binding required
2020-10-14 10:42:36 -04:00
0fb231ca2d
Merge pull request #344 from openziti/add.posture.check.api.logic
...
adds Edge API posture check logic
2020-10-13 17:23:47 -04:00
568eb129c7
address PR comments
...
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
01f4d4adfe
spelling fixes
2020-10-13 15:20:55 -04:00
8981128ee1
Fix slice allocation to set capacity not length ( #345 )
2020-10-13 14:07:24 -04:00
5e834504ec
adds Edge API routing
...
- adds mocked posture data for identities
- refines OS
- adds migrations for posture check types
2020-10-13 08:20:57 -04:00
f0fec7512c
swgger fixes
2020-10-13 08:08:12 -04:00
4fc4aee36c
swagger def for posture checks and types
...
- polymorphic posture checks with copied base entity properties
- go-swagger 0.25 generated api
2020-10-12 07:37:19 -04:00
a317d37cd4
fix #336 separate init and run
2020-10-09 04:16:59 -04:00
41da009787
remove the last of the things named gateway
2020-10-08 07:53:17 -04:00
94bb1b25b6
edge api version support
2020-10-07 07:25:14 -04:00
3bbff3a01a
support version info from fabric
2020-10-07 07:25:14 -04:00
297d8aa9f0
remove -v from vet, fix format
2020-10-05 07:18:39 -04:00
b222789350
fixes #326 nested tx for session timeouts
2020-10-05 06:58:44 -04:00
24e7375a58
fix formatting lint error
2020-10-02 16:09:14 -04:00
b23bf3efd8
fix #321 add policy display fields for reads
...
- adds *Display fields for policy list and detail
- adds *Display fields for both set of policy attributes
- adds API tests
2020-10-01 08:09:46 -04:00
50bc204dd5
Add edge terminator validator
2020-09-29 09:27:05 -04:00
50c6b3e4b3
Support identity dial/bind
2020-09-29 09:27:03 -04:00
6d1f11955b
use streaming CAs
2020-09-22 07:52:00 -04:00
0263259403
remove println
2020-09-22 07:40:10 -04:00
d4a5592edf
fix whitespace
2020-09-22 07:12:52 -04:00
a3ee258df2
fixes #305 reimplements chain validation
...
- cert auth module caches static and dynamic (3rd party) CA chains
- all cert auths validated against active chains
- deleted/disabled 3rd party CAs no longer validate
2020-09-22 07:11:55 -04:00
6814db98c1
adds public ip address for #226
2020-09-09 10:42:20 -04:00
734e9a5542
Fix service policy migration. Update for terminator precendence changes. Log panic stacks. Fixes GH-291
2020-09-03 10:22:27 -04:00
47c6c9ce6e
remove dupe log message
2020-08-26 15:16:32 -04:00
950bd7d971
uncomment logging messages for batch updates
2020-08-26 13:45:08 -04:00
Andrew Martinez