Commit Graph

  • 948735d86c fixes openziti/ziti#4094 accept first-party certs issued by a separat… (#4140) Andrew Martinez 2026-08-26 19:07:31 +01:00
  • 11040b9295 backport openziti/ziti#4304 to release-v2.0.x build flags on the version response (#4306) Andrew Martinez 2026-08-26 15:08:14 +01:00
  • d47ccaffee fixes openziti/ziti#4304 build flags on the version response (#4305) Andrew Martinez 2026-08-25 22:29:08 +01:00
  • e044a8de1f Merge pull request #4265 from openziti/backport/v2.0.x-router-connect-serialization Paul Lorenz 2026-08-25 11:11:49 -04:00
  • 1446d1653e Merge pull request #4301 from openziti/backport.v1.6.x.fix.openziti.ziti.4296.cost-header-panic Paul Lorenz 2026-08-24 19:58:34 -04:00
  • 661016508a Merge pull request #4297 from openziti/fix/cost-header-panic Paul Lorenz 2026-08-24 19:58:08 -04:00
  • 3d48c13817 Add the 2.0.4 CHANGELOG section. For #4264 Paul Lorenz 2026-08-24 15:55:51 -04:00
  • 332e0b8052 Make the control channel heartbeat cadence load-time checked. For #4264 Paul Lorenz 2026-08-24 15:34:17 -04:00
  • 22646c7487 Report a control channel reconnect, not just re-offer its state. For #4264 Paul Lorenz 2026-08-12 12:45:35 -04:00
  • 7ffb8ef2bd Retry the reconnect link announcement and wait for the wire. For #4264 Paul Lorenz 2026-08-11 16:54:05 -04:00
  • 0563a59d66 Document and test what the router connect churn limit now guards. For #4264 Paul Lorenz 2026-08-10 17:14:45 -04:00
  • e9194e8754 Fail router startup only if no controller was ever reached. For #4264 Paul Lorenz 2026-08-04 19:45:17 -04:00
  • 6c817dbbcb Close a control channel whose controller stops answering heartbeats. For #4264 Paul Lorenz 2026-07-31 11:21:07 -04:00
  • c3712949cb Make a router's control channel registration single-owner. For #4264 Paul Lorenz 2026-08-08 19:48:50 -04:00
  • 99ca242ecc Serialize router control-channel connect/disconnect. For #4264 Paul Lorenz 2026-08-08 19:47:17 -04:00
  • 8fd9fed0cb Add 1.6.21 CHANGELOG entry for the bind cost header backport. For #4299 Paul Lorenz 2026-08-24 16:42:37 -04:00
  • 54203e984f Add 2.0.4 CHANGELOG entry for the bind cost header backport. For #4298 Paul Lorenz 2026-08-24 16:42:29 -04:00
  • 8f210e58c4 Use the length-checked accessor for the bind cost header. Fixes #4299 Paul Lorenz 2026-08-24 16:21:38 -04:00
  • 17cf8b2367 Use the length-checked accessor for the bind cost header. Fixes #4298 Paul Lorenz 2026-08-24 16:21:29 -04:00
  • 69b75741d9 Use the length-checked accessor for the bind cost header. Fixes #4296 Paul Lorenz 2026-08-24 16:19:34 -04:00
  • 5749486410 Merge pull request #4200 from openziti/upgrade-test Paul Lorenz 2026-08-24 15:24:36 -04:00
  • cda6b90506 Merge pull request #4288 from openziti/fix/verify-traffic-timeout Paul Lorenz 2026-08-24 15:23:00 -04:00
  • c639518724 Replicate admin MFA removal across HA cluster members (#4284) Christopher Britton 2026-08-24 14:46:51 -04:00
  • 6507b6cfa5 Bump openziti/ziti-console-assets dependabot[bot] 2026-08-24 15:23:01 +00:00
  • 804f55abb3 Merge pull request #4218 from openziti/issue-4202 Paul Lorenz 2026-08-22 09:03:03 -04:00
  • 1f4a7c0c04 Fix ziti ops verify traffic hanging when a dial fails Paul Lorenz 2026-08-21 16:32:57 -04:00
  • ba12b60baa Add in-place upgrade smoke test. Fixes #4199 Paul Lorenz 2026-08-12 11:14:56 -04:00
  • 92cd4bbd57 Merge pull request #4287 from openziti/no-forward-crypto-method Paul Lorenz 2026-08-21 16:41:09 -04:00
  • 745d79dd00 Merge pull request #4285 from openziti/update-deps-changelog v2.1.0-pre2 Paul Lorenz 2026-08-21 16:39:02 -04:00
  • a3e2c92ecf Stop forwarding the crypto method header to hosting SDKs Paul Lorenz 2026-08-21 16:12:08 -04:00
  • 820dbe884f Update deps and changelog Paul Lorenz 2026-08-21 15:07:30 -04:00
  • a4200c5f5f Merge pull request #4286 from openziti/fix-ext-jwt-overlapping-kids-test Paul Lorenz 2026-08-21 14:56:15 -04:00
  • a404a23af5 Fix ext-jwt overlapping-kids test under the hardened JWKS resolver Paul Lorenz 2026-08-21 11:20:46 -04:00
  • d7878c55e0 Merge commit from fork v1.6.20 Paul Lorenz 2026-08-20 15:41:33 -04:00
  • e86e337a1f Merge commit from fork v2.0.3 Paul Lorenz 2026-08-20 15:41:33 -04:00
  • c99e1b8483 Merge commit from fork Paul Lorenz 2026-08-20 15:41:33 -04:00
  • 9b27f2cff7 Merge commit from fork Paul Lorenz 2026-08-20 15:40:50 -04:00
  • f940c81ebe Merge commit from fork Paul Lorenz 2026-08-20 15:40:50 -04:00
  • e47b07fbe6 backport fixes GHSA-354c-gpg9-j988 to v1.6 router MFA posture nil panic Andrew Martinez 2026-07-22 09:21:20 -04:00
  • c39a9b82b5 backport fixes GHSA-354c-gpg9-j988 to v2.0 router MFA posture nil panic Andrew Martinez 2026-07-22 09:21:20 -04:00
  • 249b02cb15 Add consolidated 2.0.3 security advisory notes to the changelog Paul Lorenz 2026-08-19 17:46:03 -04:00
  • 1ae9b5b121 Validate the API session token when creating circuits via CreateCircuitV3 Paul Lorenz 2026-08-06 18:59:56 -04:00
  • f11240c294 fixes GHSA-354c-gpg9-j988 router MFA posture check panics on nil wake/unlock state Andrew Martinez 2026-07-22 09:21:20 -04:00
  • 464232717e Validate the API session token when creating circuits via CreateCircuitV3 Paul Lorenz 2026-08-06 18:59:56 -04:00
  • 5d0329bdc2 Merge commit from fork Paul Lorenz 2026-08-20 15:27:56 -04:00
  • 57da54cb37 Merge commit from fork Paul Lorenz 2026-08-20 15:27:56 -04:00
  • e38970803c Merge commit from fork Paul Lorenz 2026-08-20 15:27:56 -04:00
  • ef9ffc8a20 Merge commit from fork Paul Lorenz 2026-08-20 15:26:13 -04:00
  • 67fc181471 Merge commit from fork Paul Lorenz 2026-08-20 15:26:12 -04:00
  • b79d6aa324 backport fixes GHSA-whjr-3j94-gw3c to v2.0 constrain external jwt signer JWKS fetching Andrew Martinez 2026-07-25 12:03:39 -04:00
  • 5964561abb backport fixes GHSA-4h58-w989-xgg4 to v2.0 enforce issuer and audience in ext-jwt token enrollment Andrew Martinez 2026-07-07 21:46:56 -04:00
  • c257812fb6 Add consolidated 1.6.20 security advisory notes to the changelog Paul Lorenz 2026-08-19 17:24:29 -04:00
  • 9e3aff2bab backport fixes GHSA-whjr-3j94-gw3c to v1.6 constrain external jwt signer JWKS fetching Andrew Martinez 2026-07-25 12:03:39 -04:00
  • 9cf98a1dc9 fixes GHSA-4h58-w989-xgg4 enforce issuer and audience in ext-jwt token enrollment Andrew Martinez 2026-07-07 21:46:56 -04:00
  • f64b6879cf fixes GHSA-whjr-3j94-gw3c constrain external jwt signer JWKS fetching Andrew Martinez 2026-07-25 12:03:39 -04:00
  • bbfef25870 Merge commit from fork Paul Lorenz 2026-08-20 14:46:31 -04:00
  • d170b512af Merge commit from fork Paul Lorenz 2026-08-20 14:46:31 -04:00
  • 397ee59e53 Merge commit from fork Paul Lorenz 2026-08-20 14:46:31 -04:00
  • 70976c61ae Merge commit from fork Paul Lorenz 2026-08-20 14:44:40 -04:00
  • f53d975f9e Merge commit from fork Paul Lorenz 2026-08-20 14:44:40 -04:00
  • 3a95adf340 Merge commit from fork Paul Lorenz 2026-08-20 14:44:40 -04:00
  • cd60b43f16 Merge commit from fork Paul Lorenz 2026-08-20 14:36:51 -04:00
  • e36ce6f810 fixes GHSA-q8g9-jc4c-jp6q limit pre-auth request body buffering Andrew Martinez 2026-07-23 10:22:23 -04:00
  • 9a2db14b75 Merge commit from fork Paul Lorenz 2026-08-20 14:13:21 -04:00
  • 95f2e945b3 Merge commit from fork Paul Lorenz 2026-08-20 14:13:21 -04:00
  • 97a0208c8b Merge commit from fork Paul Lorenz 2026-08-20 14:13:21 -04:00
  • 7fbd1c1254 Merge commit from fork Paul Lorenz 2026-08-20 14:00:08 -04:00
  • 11929c8a68 Merge commit from fork Paul Lorenz 2026-08-20 14:00:08 -04:00
  • 0db32f7c1f Merge commit from fork Paul Lorenz 2026-08-20 14:00:08 -04:00
  • 82037ba260 Add consolidated 2.0.3 security advisory notes to the changelog Paul Lorenz 2026-08-19 17:46:04 -04:00
  • 75c6c74b4d Add consolidated 2.0.3 security advisory notes to the changelog Paul Lorenz 2026-08-19 17:46:03 -04:00
  • 1d3569a281 Add consolidated 2.0.3 security advisory notes to the changelog Paul Lorenz 2026-08-19 17:46:03 -04:00
  • 92116f7b17 Note the router link identity advisory in the 2.0.3 release notes Paul Lorenz 2026-08-12 15:41:04 -04:00
  • d6ccaff24a adds regression test for api session certificate scoping Andrew Martinez 2026-07-24 16:36:22 -04:00
  • c10cb8657a backport fixes GHSA-j952-6x8x-jmj6 to v2.0 reuse buffered request body in legacy enrollment Andrew Martinez 2026-07-24 12:29:34 -04:00
  • 0eb555f6c7 Verify link peer identity against the leaf certificate only Paul Lorenz 2026-08-10 15:46:13 -04:00
  • 1889123bbc Add consolidated 2.0.3 security advisory notes to the changelog Paul Lorenz 2026-08-19 17:46:02 -04:00
  • 703f74ae28 backport fixes GHSA-q8g9-jc4c-jp6q to v2.0 limit pre-auth request body buffering Andrew Martinez 2026-07-23 10:22:23 -04:00
  • 7b2bf3f4ae Merge pull request #4279 from openziti/fix-flaky-oidc-sdk-info-test Paul Lorenz 2026-08-19 17:43:28 -04:00
  • 61a2aa9eb2 Note the router link identity advisory in the 1.6.20 release notes Paul Lorenz 2026-08-12 15:41:34 -04:00
  • 0ff7dcc5c1 Verify link peer identity against the leaf certificate only Paul Lorenz 2026-08-10 15:47:47 -04:00
  • 7fc1a82eb0 Merge pull request #4280 from openziti/fix-flaky-oidc-sdk-info-test-2.0.x Paul Lorenz 2026-08-19 17:24:11 -04:00
  • 4b2abd168e Add consolidated 1.6.20 security advisory notes to the changelog Paul Lorenz 2026-08-19 17:23:38 -04:00
  • ba225577be backport fixes GHSA-6v5r-p2wr-q492 to v1.6 scope api session certs Andrew Martinez 2026-07-24 15:20:35 -04:00
  • d2eca25053 Add consolidated 1.6.20 security advisory notes to the changelog Paul Lorenz 2026-08-19 17:23:25 -04:00
  • 14345d39d5 backport fixes GHSA-j952-6x8x-jmj6 to v1.6 reuse buffered request body in legacy enrollment Andrew Martinez 2026-07-24 12:29:34 -04:00
  • 05ea21a165 Add consolidated 1.6.20 security advisory notes to the changelog Paul Lorenz 2026-08-19 17:22:56 -04:00
  • 0895b4ef2f backport fixes GHSA-q8g9-jc4c-jp6q to v1.6 limit pre-auth request body buffering Andrew Martinez 2026-07-23 10:22:23 -04:00
  • dd75a3b3de Move the sdk info wait onto ManagementHelperClient Paul Lorenz 2026-08-19 16:55:01 -04:00
  • 4030840859 Move the sdk info wait onto ManagementHelperClient Paul Lorenz 2026-08-19 16:55:01 -04:00
  • 557d076fe1 Merge pull request #4272 from openziti/backport-4270-udp-conn-close Paul Lorenz 2026-08-19 15:29:00 -04:00
  • fef566bb49 Merge pull request #4271 from openziti/backport-4269-udp-conn-close Paul Lorenz 2026-08-19 15:28:14 -04:00
  • 126104c0ef Merge pull request #4273 from openziti/fix-4184-udp-conn-close Paul Lorenz 2026-08-19 15:26:40 -04:00
  • 850a687a0e Fill in missing 2.1.0 changelog entries Paul Lorenz 2026-08-19 13:24:56 -04:00
  • 1b6cf5f182 Update deps and changelog Paul Lorenz 2026-08-19 13:24:42 -04:00
  • 9d053bfdb6 Update deps and changelog Paul Lorenz 2026-08-19 13:21:24 -04:00
  • 7b639eafc5 Close the xgress when a conn without half-close ends. Fixes #4269 Paul Lorenz 2026-08-17 15:38:03 -04:00
  • 68a731b83e Update deps and changelog Paul Lorenz 2026-08-19 12:38:43 -04:00
  • 34a001faa2 Close the xgress when a conn without half-close ends. Fixes #4184 Paul Lorenz 2026-08-17 15:35:36 -04:00
  • 9f25798ca8 Anchor the post-cutoff revocation test to a later iat second Paul Lorenz 2026-08-19 00:23:20 -04:00