49804bd30b
Merge pull request #470 from openziti/add.appid.appversion
...
Add appId and appVersion to sdkInfo
2021-01-18 15:03:29 -05:00
c5d3a4b69b
Improve posture check perf using indexes
2021-01-18 14:15:30 -05:00
65be49c609
Add appId and appVersion to sdkInfo
2021-01-18 10:38:43 -05:00
807a061a93
adds expiration-seconds and expires-at headers
...
- also adds expiresSeconds to current api session and login
2021-01-14 11:30:44 -05:00
5efbbf0942
Add health check implementation for tunnelers and add default hosting precedence and cost to identity
2021-01-12 11:00:43 -05:00
a3789c063a
adds support of API Session Certificates
...
- adds ability for any authenticated API Session to create ephemeral
certificates
- allows UPDB session connection
- adds create/delete/read of current api session certificates
- add session cert pem result on create and detail
- fixes ER not updating sessions with new certs from API session
- fixes naming of session vs apiSession on members, functions, etc
- organizes ER state manager functions into apiSession vs session
- adds api session ids to api sessions and sessions sent from the
controller to ERs
- ensure api and ns fingerprints are the same
- filter api session certs by valid periods
- clarify fingerprint func naming
2021-01-06 09:42:57 -05:00
6ad6b3264c
fixes #403
...
Process posture responses now allow an array of digital signer
fingerprints to be submitted and checked.
2020-11-11 21:31:17 -05:00
108b657044
fix missing dangling period in os posture test
2020-11-11 20:51:54 -05:00
48a3f5dc0b
remove unused function
2020-11-11 20:39:35 -05:00
4631fe1452
fixes #401
...
Valid x.y.z versions of OS posture checks can now be specified by
posture check ranges.
2020-11-11 20:32:48 -05:00
a80b27afe6
fix test based on pr
2020-11-11 19:11:05 -05:00
e0cf6a7ea5
fixes #397 and fixes #398
...
- isSigner is removed as it is not used
- process binary and signer hashes are case insensitive
2020-11-11 14:09:09 -05:00
2ecdb921a9
fix process checks
2020-11-10 16:03:56 -05:00
84225d2796
fixes #394
...
In scenarios where a service has no policies with any checks after
initialization, the posture checks would fail incorrectly.
2020-11-10 14:50:23 -05:00
428135c4ad
fix empty session type
2020-11-05 21:23:49 -05:00
e859ce6a67
filter posture check sets by bind type
2020-11-05 19:40:27 -05:00
53f702c212
Merge pull request #369 from openziti/add.online.status
...
Add.online.status
2020-10-31 08:35:39 -04:00
394a844878
fixes for mop/sdks
...
- case insensitive checks for domain/os
- no minimum mac addresses on posture responses
2020-10-30 14:13:43 -04:00
ac187ffa99
posture check implementation
...
- fix testing bugs
- remove testing timout function setters
- fixes deadlock due to posture data timeouts
- fix replace statements
- use map for posture data change tracking
2020-10-29 09:10:15 -04:00
c726f158d6
fixes #365 adds hasApiSession and hasEdgeRouterConnection
2020-10-20 15:00:22 -04:00
568eb129c7
address PR comments
...
- remove unused property: type
- add service policy plumbing for postureCheck roles
- add denomralization for posture check roles
- make encryptionRequired flag reqquired
2020-10-13 17:03:26 -04:00
01f4d4adfe
spelling fixes
2020-10-13 15:20:55 -04:00
5e834504ec
adds Edge API routing
...
- adds mocked posture data for identities
- refines OS
- adds migrations for posture check types
2020-10-13 08:20:57 -04:00
4fc4aee36c
swagger def for posture checks and types
...
- polymorphic posture checks with copied base entity properties
- go-swagger 0.25 generated api
2020-10-12 07:37:19 -04:00
3bbff3a01a
support version info from fabric
2020-10-07 07:25:14 -04:00
50bc204dd5
Add edge terminator validator
2020-09-29 09:27:05 -04:00
6d1f11955b
use streaming CAs
2020-09-22 07:52:00 -04:00
0263259403
remove println
2020-09-22 07:40:10 -04:00
d4a5592edf
fix whitespace
2020-09-22 07:12:52 -04:00
a3ee258df2
fixes #305 reimplements chain validation
...
- cert auth module caches static and dynamic (3rd party) CA chains
- all cert auths validated against active chains
- deleted/disabled 3rd party CAs no longer validate
2020-09-22 07:11:55 -04:00
6814db98c1
adds public ip address for #226
2020-09-09 10:42:20 -04:00
47c6c9ce6e
remove dupe log message
2020-08-26 15:16:32 -04:00
950bd7d971
uncomment logging messages for batch updates
2020-08-26 13:45:08 -04:00
03277fa1f6
add heartbeat interval configuration
2020-08-25 17:35:51 -04:00
f92b88e395
Merge branch 'master' into stream.sessions.276
2020-08-24 08:40:29 -04:00
faec4b95ba
various fixes for API streaming and data net support
...
- http requests should hard timeout w/ a reasonable response
- edge routers should close when an API session token is not provided or
does not match
- stream both types of sessions on edge router connect
- stream sessions for time out processing/deletion
- add id to session messages (edge control pb update, breaks backwards
compat)
2020-08-24 08:31:45 -04:00
c179f87538
Improve session create performance. Closes GH-281
2020-08-20 12:35:04 -04:00
e2ad712948
Add edge session events API. Closes GH-229
2020-08-11 14:00:57 -04:00
ada72b335b
Merge branch 'master' into e2e.router.termination
2020-07-31 09:50:09 -04:00
c8b7a8d8c7
Implemented policy model performance improvements. Fixes GH-256
2020-07-28 10:03:36 -04:00
e39c21b6a1
e2e support fixes #173
...
- adds edge level edge_transport xgress
- adds service encyrptionRequired flag (rest API, protobuffs)
- adds edge router encryption checks
2020-07-27 16:18:46 -04:00
31089be1f4
set edge router result list to all
...
- all is denoted by -1 which is actualy the max for int64
2020-07-20 15:21:29 -04:00
6c8dc06b49
Fix potential deadlock
2020-07-07 15:20:42 -04:00
48def995f3
fixes #191 , CLI password changes
...
- requires corresponding changes in the CLI as well
2020-06-25 14:53:53 -04:00
96d1d9e905
Merge branch 'master' into fix.224.cert.log.entries
2020-06-24 14:35:22 -04:00
736c535cdd
Fix listener close logic ( #223 )
...
* Fix listener close logic
* Make timeout 8m
* Fix bbolt deadlock
2020-06-24 14:32:32 -04:00
6bb9eeff20
fixed #224 extra log output during invalid cert auth
2020-06-23 23:46:01 -04:00
6795f7c520
Fix query symbol names. Fix fingerprint formats in migration
2020-06-19 16:52:05 -04:00
81b5a4ef76
Move service and router names to fabric
2020-06-19 14:10:31 -04:00
5ddefc25c2
Merge branch 'master' into use.shortids
2020-06-17 17:24:24 -04:00
Andrew