Andrew Martinez b4f6223ad1 fixes openziti/ziti#4321 compare process hashes and fingerprints case… (#4344) ...

* fixes openziti/ziti#4321 compare process hashes and fingerprints case-insensitively

- normalizes configured hashes and signer fingerprints to lowercase unseparated hex in the
  PROCESS and PROCESS_MULTI stores, on load as well as on save, so values stored before this
  change read back normalized without a migration
- replaces the PROCESS store's lowercase-only pass, PROCESS_MULTI stored its values verbatim
- adds store tests for both types covering configured values and values written straight to bolt
- updates the process multi patch round-trip test, the management API now returns normalized
  values rather than the submitted strings
- removes the trailing newline from the signer fingerprint literal in the process and
  process-multi OIDC posture tests

2026-09-08 13:45:15 -04:00

..

api_session_certificate_manager.go

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

api_session_certificate_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

api_session_heartbeats.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

api_session_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

api_session_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

auth_policy_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

auth_policy_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

authenticator_manager.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

authenticator_mod_cert.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

authenticator_mod_ext_jwt_test.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

authenticator_mod_ext_jwt.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

authenticator_mod_updb.go

fixes two issues

2026-02-25 09:34:59 -05:00

authenticator_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

authenticator.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

base_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

base_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

ca_manager_cert_pop_test.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

ca_manager.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

ca_model.go

fixes #3952 reject invalid externalIdClaim and stop enrollment panic (#3953)

2026-06-12 13:52:54 -04:00

ca_test.go

fixes #3952 reject invalid externalIdClaim and stop enrollment panic (#3953)

2026-06-12 13:52:54 -04:00

circuit_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

command_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

command.go

fixes openziti/ziti#4094 accept first-party certs issued by a separat… (#4140)

2026-08-26 14:07:31 -04:00

config_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

config_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

config_type_manager.go

Add target field to config types. Fixes #3744

2026-05-27 13:17:06 -04:00

config_type_model.go

Add target field to config types. Fixes #3744

2026-05-27 13:17:06 -04:00

connection_tracker_test.go

Fix lock order inversion in ConnectionTracker. Fixes #4206

2026-07-31 14:08:08 -04:00

controller_manager.go

fixes openziti/ziti#4094 accept first-party certs issued by a separat… (#4140)

2026-08-26 14:07:31 -04:00

controller_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

create_terminator_cmd.go

Migrate to the sdk-golang v2 module path. For #3884

2026-06-23 15:43:39 -04:00

edge_router_manager_test.go

Make ER/T terminator create failures diagnosable. Fixes #4193

2026-08-03 15:43:30 -04:00

edge_router_manager.go

Make ER/T terminator create failures diagnosable. Fixes #4193

2026-08-03 15:43:30 -04:00

edge_router_model.go

fixes openziti/ziti#3990 push service and posture changes to subscrib… (#4057)

2026-07-22 11:52:39 -04:00

edge_router_policy_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

edge_router_policy_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

edge_service_manager.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

edge_service_model.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

enrollment_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

enrollment_mod_ca.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_mod_erott.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

enrollment_mod_ott.go

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

enrollment_mod_ottca.go

fix #3933 add controller to enrollment response (#3947)

2026-06-29 11:44:23 -04:00

enrollment_mod_token.go

fix #3933 add controller to enrollment response (#3947)

2026-06-29 11:44:23 -04:00

enrollment_mod_trott.go

Optimize imports

2026-01-28 15:01:35 -05:00

enrollment_mod_updb.go

fix #3933 add controller to enrollment response (#3947)

2026-06-29 11:44:23 -04:00

enrollment_model.go

Migrate to the sdk-golang v2 module path. For #3884

2026-06-23 15:43:39 -04:00

enrollment.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

env.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

external_jwt_signer_manager.go

fixes GHSA-whjr-3j94-gw3c constrain external jwt signer JWKS fetching

2026-08-20 15:12:56 -04:00

external_jwt_signer_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

fabric_only_service_test.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

hash.go

Optimize imports

2026-01-28 15:01:35 -05:00

identity_manager_test.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

identity_manager.go

Fix lock order inversion in ConnectionTracker. Fixes #4206

2026-07-31 14:08:08 -04:00

identity_model.go

Migrate to the sdk-golang v2 module path. For #3884

2026-06-23 15:43:39 -04:00

identity_type_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

identity_type_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

interface_model.go

Optimize imports

2026-01-28 15:01:35 -05:00

jwks_resolver_test.go

fixes GHSA-whjr-3j94-gw3c constrain external jwt signer JWKS fetching

2026-08-20 15:12:56 -04:00

jwks_resolver.go

fixes GHSA-whjr-3j94-gw3c constrain external jwt signer JWKS fetching

2026-08-20 15:12:56 -04:00

link_manager_test.go

Add striped per-link locking and cache-before-txn router reads. Fixes #4045

2026-06-26 11:51:00 -04:00

link_manager.go

Add striped per-link locking and cache-before-txn router reads. Fixes #4045

2026-06-26 11:51:00 -04:00

link_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

managers.go

Coalesce OIDC JWT revocations to reduce controller write pressure. Fixes #3681

2026-03-19 08:35:00 -04:00

mfa_manager.go

Replicate admin MFA removal across HA cluster members (#4284)

2026-08-24 14:46:51 -04:00

mfa_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

path.go

Set empty path when reserving circuit, to avoid panics. Fixes #3777

2026-04-07 09:25:55 -04:00

pbutils.go

Optimize imports

2026-01-28 15:01:35 -05:00

policy_advisor.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

posture_check_model_mac.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_mfa_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_mfa.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_os_test.go

codespell: Add spelling check and fix all issues

2023-12-19 10:52:42 +01:00

posture_check_model_os.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_process_multi_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_process_multi.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_process_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_check_model_process.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model_windows_domain.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

posture_check_type_manager.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

posture_check_type_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

posture_response_manager_test.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_response_manager.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

posture_response_model_domain.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_endpoint_state.go

Optimize imports

2026-01-28 15:01:35 -05:00

posture_response_model_mac.go

fixes openziti/ziti#4321 compare process hashes and fingerprints case… (#4344)

2026-09-08 13:45:15 -04:00

posture_response_model_mfa.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_os.go

Update copyright

2022-06-30 17:45:08 -04:00

posture_response_model_process.go

fixes openziti/ziti#4321 compare process hashes and fingerprints case… (#4344)

2026-09-08 13:45:15 -04:00

posture_response_model.go

fixes openziti/ziti#4321 compare process hashes and fingerprints case… (#4344)

2026-09-08 13:45:15 -04:00

revocation_manager.go

Enforce api-session and identity revocations on the router. Fixes #3927

2026-06-13 01:36:12 -04:00

revocation_model.go

Enforce api-session and identity revocations on the router. Fixes #3927

2026-06-13 01:36:12 -04:00

role_attribute_usage_test.go

Add role-attribute usage queries. Fixes #1593

2026-06-10 12:39:26 -04:00

role_attribute_usage.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

router_manager_test.go

Serialize router control-channel connect/disconnect. Fixes #4196

2026-08-13 23:54:40 -04:00

router_manager.go

Serialize router control-channel connect/disconnect. Fixes #4196

2026-08-13 23:54:40 -04:00

router_model.go

Serialize router control-channel connect/disconnect. Fixes #4196

2026-08-13 23:54:40 -04:00

service_edge_router_policy_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

service_edge_router_policy_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

service_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

service_model.go

Collapse fabric and edge services at the db level. Fixes #3934

2026-06-16 13:04:13 -04:00

service_policy_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

service_policy_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

session_manager_test.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

session_manager.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

session_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

terminator_manager.go

Rewrite channel/v4 imports to channel/v5. For #3983

2026-06-18 12:51:02 -04:00

terminator_model.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

testing.go

Stop linking the testing package via the model test context

2026-08-13 15:37:25 -04:00

token_provider_cache_test.go

fixes GHSA-4h58-w989-xgg4 enforce issuer and audience in ext-jwt token enrollment

2026-08-20 15:15:26 -04:00

token_provider_cache.go

Merge commit from fork

2026-08-20 15:27:56 -04:00

transit_router_manager.go

Add configs field to routers. Fixes #3780

2026-06-11 13:45:58 -04:00

transit_router_model.go

Add configs field to routers. Fixes #3780

2026-06-11 13:45:58 -04:00