Files
ziti/controller/handler_ctrl
Paul Lorenz 6b342c9515 Verify router leaf against full CA bundle without EKU restriction
- verifies the control-channel peer leaf against the controller's full trusted-CA pool
  (identity.CA()) instead of only self-signed roots, honoring intermediate trust anchors
  and multi-root bundles
- drops the client-auth extended-key-usage requirement so an externally managed PKI with
  arbitrary or absent EKUs is not rejected
2026-07-27 14:07:53 -04:00
..
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00
2025-04-02 15:28:59 -04:00