Paul Lorenz 3e6f0f2a76 Verify router leaf against full CA bundle without EKU restriction ...

- verifies the control-channel peer leaf against the controller's full trusted-CA pool
  (identity.CA()) instead of only self-signed roots, honoring intermediate trust anchors
  and multi-root bundles
- drops the client-auth extended-key-usage requirement so an externally managed PKI with
  arbitrary or absent EKUs is not rejected

2026-07-27 14:06:44 -04:00

..

accept.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

alert.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

base.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

bind.go

Fix data race on heartbeat lastResponse and peer logger label

2026-04-03 17:42:18 -04:00

circuit_confirmation.go

Support multi-underlay control channels. Fixes #3550

2026-02-11 14:20:29 -05:00

circuit_request.go

Add CreateCircuitV3 for RDM-authorized circuit creation. Fixes #3721

2026-03-27 14:41:28 -04:00

close.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

connect_test.go

Verify router leaf against full CA bundle without EKU restriction

2026-07-27 14:06:44 -04:00

connect.go

Verify router leaf against full CA bundle without EKU restriction

2026-07-27 14:06:44 -04:00

create_terminator.go

Optimize imports

2026-01-28 15:01:35 -05:00

decommission.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

dequiesce_router.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

dial_events.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

dial_state_heap.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

dial_state_test.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

dial_state.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

dialer-states.md

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

dialer.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

fault.go

Support multi-underlay control channels. Fixes #3550

2026-02-11 14:20:29 -05:00

inspect.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

link_state.go

Optimize imports

2026-01-28 15:01:35 -05:00

metrics.go

Optimize imports

2026-01-28 15:01:35 -05:00

ping.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

quiesce_router.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

remove_terminator.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

remove_terminators.go

Fixes for SDK terminator management. Add support for ziti sdk inspection. Fixes #3609

2026-03-11 13:10:28 -04:00

route_result.go

Support multi-underlay control channels. Fixes #3550

2026-02-11 14:20:29 -05:00

router_link.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

send_cluster_members.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

trace.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

update_router_interfaces.go

Optimize imports

2026-01-28 15:01:35 -05:00

update_terminator.go

Optimize imports

2026-01-28 15:01:35 -05:00

verify_router.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00