Paul Lorenz 3e6f0f2a76 Verify router leaf against full CA bundle without EKU restriction ...

- verifies the control-channel peer leaf against the controller's full trusted-CA pool
  (identity.CA()) instead of only self-signed roots, honoring intermediate trust anchors
  and multi-root bundles
- drops the client-auth extended-key-usage requirement so an externally managed PKI with
  arbitrary or absent EKUs is not rejected

2026-07-27 14:06:44 -04:00

..

agentid

Support ziti agent inspect so ziti processes can be inspected via IPC. Fixes #3824. Fixes #2049

2026-04-24 12:12:02 -04:00

alert

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

bindpoints

fixes openziti/ziti#3626 omit overlay bind points from /versions apiB… (#3663)

2026-03-10 09:57:50 -04:00

build

Update deps and changelog

2024-06-10 13:49:50 -04:00

capabilities

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

cert

Verify router leaf against full CA bundle without EKU restriction

2026-07-27 14:06:44 -04:00

concurrency

Optimize imports

2026-01-28 15:01:35 -05:00

config

Cleanup dead code

2026-02-10 13:13:32 -05:00

ctrl_msg

Add specific circuit failure error codes. Fixes #3717, fixes #3543, fixes #3364, fixes #2888, fixes #2859, fixes #1580

2026-04-14 15:52:49 -04:00

ctrlchan

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

datastructures

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

eid

Optimize imports

2026-01-28 15:01:35 -05:00

getziti

Optimize imports

2026-01-28 15:01:35 -05:00

handler_common

Optimize imports

2026-01-28 15:01:35 -05:00

health

Optimize imports

2026-01-28 15:01:35 -05:00

inspect

Address review comments

2026-03-11 15:48:30 -04:00

logcontext

Optimize imports

2026-01-28 15:01:35 -05:00

metrics

Optimize imports

2026-01-28 15:01:35 -05:00

outputz

Add --human-readable and --max-depth options to ziti ops db du Fixes #2821

2025-02-25 10:24:45 -05:00

pb

Enforce api-session and identity revocations on the router. Fixes #3929

2026-06-24 15:42:01 -04:00

profiler

Fix golangci-lint errors

2025-10-17 12:54:25 -04:00

runner

Optimize imports

2026-01-28 15:01:35 -05:00

spiffehlp

fixes #3734 enforce client certificate proof-of-possession for OIDC sessions (#3805)

2026-04-23 12:00:46 -04:00

trace

Optimize imports

2026-01-28 15:01:35 -05:00

version

Optimize imports

2026-01-28 15:01:35 -05:00

binding.go

Reorganize code in preparation for merging to ziti repo, first pass.

2023-08-04 09:48:06 -04:00

event_cache_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

event_cache.go

Add gap detectino and handling to router data model. Fixes #3599

2026-02-24 15:50:07 -05:00

oidc_tokens.go

Enforce api-session and identity revocations on the router. Fixes #3929

2026-06-24 15:42:01 -04:00

router_data_model_diff_test.go

Ignore revocation timestamps in RDM diff pending deterministic timestamps. For #4088

2026-07-14 12:46:53 -04:00

router_data_model_sender.go

Ignore revocation timestamps in RDM diff pending deterministic timestamps. For #4088

2026-07-14 12:46:53 -04:00

router_data_model.go

Ignore revocation timestamps in RDM diff pending deterministic timestamps. For #4088

2026-07-14 12:46:53 -04:00

security_tokens.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

subscriber_config_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

subscriber_identity_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

subscriber_posture_check_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

subscriber_service_policy_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

subscriber_service_test.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

subscriber_test.go

Fix event name, IdentityFullStateState -> IdentityFullState

2026-03-25 12:05:23 -04:00

subscriber_util_test.go

Optimize router data model subscription code. Add additional events. Fixes #3359

2025-12-02 11:37:38 -05:00

subscriber.go

Fix event name, IdentityFullStateState -> IdentityFullState

2026-03-25 12:05:23 -04:00