Paul Lorenz cada8b364a Add negative-path tests for peer connection certificate validation ...

- adds tests asserting incoming router links reject a dialer presenting an
  untrusted or self-signed leaf, including one backed by a scraped CA-chained
  filler cert, and accept a leaf that chains to the CA
- adds tests asserting the metrics scrape-cert gate matches the pinned cert
  against the presented leaf only, honors the validity window, and rejects
  requests with no client certificate

2026-07-27 14:05:17 -04:00

..

client-api.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

controller-health.go

Optimize imports

2026-01-28 15:01:35 -05:00

fabric-management-api.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

generic-http_test.go

add generic 'binding: spa', fix quickstart --home, lint cleanup

2026-05-03 11:08:40 -04:00

generic-http.go

add generic 'binding: spa', fix quickstart --home, lint cleanup

2026-05-03 11:08:40 -04:00

management-api.go

fixes openziti/ziti#3356 adds www-authenticate headers (#3561)

2026-02-24 10:01:36 -05:00

metrics_api_model.go

Update ziti version to 2.0

2026-01-28 12:34:10 -05:00

metrics-api_test.go

Add negative-path tests for peer connection certificate validation

2026-07-27 14:05:17 -04:00

metrics-api.go

Add stricter certificate chain validation for peer connections

2026-07-27 14:05:17 -04:00

oidc-api_test.go

Skip wildcard DNS SANs when building OIDC issuers. Fixes #3696

2026-03-23 11:02:10 -04:00

oidc-api.go

Merge pull request #3576 from dmuensterer/fix/oidc-token-refresh-bugs

2026-04-01 13:18:06 -04:00

spa.go

add generic 'binding: spa', fix quickstart --home, lint cleanup

2026-05-03 11:08:40 -04:00

versions.go

fix.openziti.ziti.3597.OIDC.by.default (#3605)

2026-03-04 10:03:14 -05:00

zac.go

add generic 'binding: spa', fix quickstart --home, lint cleanup

2026-05-03 11:08:40 -04:00