Paul Lorenz 11897fba7b Merge commit from fork ...

Fix/peer cert chain validation

2026-07-27 15:12:10 -04:00

..

api

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

apierror

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

change

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

command

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

config

Enforce api-session and identity revocations on the router. Fixes #3929

2026-06-24 15:42:01 -04:00

db

Copy eventual event data out of bolt memory. For #4108

2026-07-15 19:14:08 -04:00

entities

Update copyright

2022-06-30 17:45:08 -04:00

env

Rework connect event handling to ensure serialized-per-router handling

2026-04-24 13:22:02 -04:00

event

fixes #3809 support CSR submission during OIDC authentication (#3840)

2026-05-07 13:56:48 -04:00

events

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

fields

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

handler_ctrl

Verify router leaf against full CA bundle without EKU restriction

2026-07-27 14:06:44 -04:00

handler_edge_ctrl

Rework connect event handling to ensure serialized-per-router handling

2026-04-24 13:22:02 -04:00

handler_mgmt

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

handler_peer_ctrl

Fix potential deadlock if panic while lock held

2026-04-06 09:56:43 -04:00

idgen

Optimize imports

2026-01-28 15:01:35 -05:00

internal

Prevent enrollment-based privilege escalation to admin identities. Fixes #4049

2026-06-26 13:18:33 -04:00

ioc

Refactor xgress_edge_tunnel_v2 to make it more pluggable

2025-09-03 16:03:15 -04:00

jwtsigner

fix #3231 use root controller server certs for OIDC signing (#3236)

2025-08-26 09:29:50 -04:00

middleware

Optimize imports

2026-01-28 15:01:35 -05:00

model

Use MaxTokenDuration for identity revocation lifetime. For #3929

2026-06-24 15:42:01 -04:00

models

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

network

Support ziti agent inspect so ziti processes can be inspected via IPC. Fixes #3824. Fixes #2049

2026-04-24 12:12:02 -04:00

oidc_auth

Enforce api-session and identity revocations on the router. Fixes #3929

2026-06-24 15:42:01 -04:00

peermsg

Add more raft configuration options. Fixes openziti/fabric#597

2023-02-15 23:47:57 -05:00

permissions

Tidy duplicate permission types. Remove vestigial info message. Update changelog

2026-05-08 11:34:20 -04:00

raft

Verify peer leaf against full CA bundle without EKU restriction

2026-07-27 14:05:17 -04:00

response

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

rest_client

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

rest_model

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

rest_server

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

rest_util

Optimize imports

2026-01-28 15:01:35 -05:00

scripts

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

server

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

specs

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00

storage

Enforce api-session and identity revocations on the router. Fixes #3929

2026-06-24 15:42:01 -04:00

subcmd

Optimize imports

2026-01-28 15:01:35 -05:00

sync_strats

Load revocations when rebuilding the router data model. For #4102

2026-07-14 17:02:45 -04:00

webapis

Add negative-path tests for peer connection certificate validation

2026-07-27 14:05:17 -04:00

xctrl

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

xctrl_example

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

xmgmt

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

xt

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

xt_common

Expand routing costs to use full uint32 space. Each precedence can now cover about 1B. Fixes #3074

2026-02-20 15:54:41 -05:00

xt_random

global circuit costs not cleared when terminator is deleted. Fixes #3556

2026-02-20 15:54:06 -05:00

xt_smartrouting

Optimize imports

2026-01-28 15:01:35 -05:00

xt_sticky

Optimize imports

2026-01-28 15:01:35 -05:00

xt_weighted

costing calculation for the weighted terminator selection strategy is incorrect. Fixes #3557

2026-02-20 15:54:06 -05:00

agent.go

Support ziti agent inspect so ziti processes can be inspected via IPC. Fixes #3824. Fixes #2049

2026-04-24 12:12:02 -04:00

controller.go

Validate router certificates on typed control channel connections

2026-07-27 14:06:44 -04:00

health.go

Update package paths for newly imported storage and ziti-db-explorer packages

2026-04-16 09:18:55 -04:00

settings.go

Add support for ctrlChanListener on router to the model. Fixes #3635

2026-03-07 00:00:51 -05:00