Commit Graph

143 Commits

Author SHA1 Message Date
Darren Shepherd
5276ad483a
Merge pull request #17 from ibuildthecloud/dropconn
Add option to close connections on cert change
2020-02-12 14:13:44 -07:00
Darren Shepherd
8545ce98db Add option to close connections on cert change 2020-02-12 14:00:40 -07:00
Darren Shepherd
3f92468568
Merge pull request #16 from ibuildthecloud/master
Fix acme listener
2020-02-07 14:28:38 -07:00
Darren Shepherd
5ba69b1c5f Fix acme listener 2020-02-07 14:20:45 -07:00
Darren Shepherd
6281628cd4
Merge pull request #15 from ibuildthecloud/master
Add BindHost option
2020-02-05 23:12:55 -07:00
Darren Shepherd
0b114dc0c2 Add BindHost option 2020-02-05 23:11:51 -07:00
Darren Shepherd
ece289ed54
Merge pull request #14 from ibuildthecloud/master
Fix merging of the k8s secret to reduce the number of writes
2020-02-04 12:49:56 -07:00
Darren Shepherd
bc68bf5499 Fix merging of the k8s secret to reduce the number of writes 2020-02-04 12:48:38 -07:00
Darren Shepherd
795bb90214
Merge pull request #13 from ibuildthecloud/master
Add more helpers
2020-01-30 22:41:53 -07:00
Darren Shepherd
dcc205f52d mod tidy 2020-01-30 22:41:19 -07:00
Darren Shepherd
4e8035fa46 Fix go fmt/vet issues 2020-01-30 22:41:19 -07:00
Darren Shepherd
a75e84bc81 Add more helpers 2020-01-30 22:41:19 -07:00
Darren Shepherd
ab900b5268
Merge pull request #12 from ibuildthecloud/master
Add static storage and listener opts
2019-12-04 11:35:09 -07:00
Darren Shepherd
f1484a07b3 Add static storage and listener opts 2019-12-04 11:32:00 -07:00
Darren Shepherd
b6b942bff0
Merge pull request #11 from ibuildthecloud/master
Support old or imported RSA keys
2019-11-15 23:45:38 +00:00
Darren Shepherd
3c2990b7c5 Support old or imported RSA keys 2019-11-15 23:45:14 +00:00
Darren Shepherd
ccf76b35ea Don't clobber secret key
On the start of a new server we do not want to blindly save the
cert because that will change the TLS key.  Instead only write
to k8s on start if there is no secret in k8s.  On start of the
controller it will sync up if the local file and k8s secret aren't
the same
2019-11-15 23:45:10 +00:00
Darren Shepherd
988d8dd3f4 Add info logging when certs change 2019-11-15 23:43:29 +00:00
Darren Shepherd
736b5d5d8b
Merge pull request #10 from ibuildthecloud/master
Don't generate cert for ipv6 address
2019-11-13 14:47:57 +00:00
Darren Shepherd
655c08132d Don't generate cert for ipv6 address 2019-11-13 14:46:32 +00:00
Darren Shepherd
02b97e01f1 Attempt to minimize additional cert gens 2019-11-13 14:46:32 +00:00
Darren Shepherd
aaa5bc0d2a
Merge pull request #9 from ibuildthecloud/master
Save secret to k8s on start
2019-11-10 03:52:54 +00:00
Darren Shepherd
6c7ccae2fc Save secret to k8s on start 2019-11-10 03:51:22 +00:00
Darren Shepherd
36c5023d47 Wrong address used
Fixes three issues
1. Use localaddr, not remoteadd for CN
2. Don't return error from net.Listener.Accept
3. Try three times to save secret
2019-11-09 06:09:10 +00:00
Darren Shepherd
245f86cc34
Merge pull request #8 from ibuildthecloud/master
Remove debug statement
2019-11-08 20:58:17 +00:00
Darren Shepherd
f570529af6 Remove debug statement 2019-11-08 20:57:46 +00:00
Darren Shepherd
bcf3a564c5
Merge pull request #7 from ibuildthecloud/master
Fix issues in k8s storage
2019-11-08 19:01:28 +00:00
Darren Shepherd
9adf776973 Fix issues in k8s storage 2019-11-08 19:00:53 +00:00
Darren Shepherd
6224794ef3
Merge pull request #6 from ibuildthecloud/master
V2
2019-10-30 19:20:09 -07:00
Darren Shepherd
5878218dc0 Update go mod 2019-10-30 19:15:37 -07:00
Darren Shepherd
af04867843 Refactor to not include a server by default 2019-10-30 19:14:34 -07:00
Erik Wilson
8a2488bc86
Merge pull request #5 from galal-hussein/rotate_expired_wrangler
rotate expired wrangler cert
2019-10-09 18:11:34 -07:00
galal-hussein
583d996366 rotate wrangler cert 2019-10-10 03:05:39 +02:00
Darren Shepherd
e2ac9e2c19
Merge pull request #4 from galal-hussein/add_generate_keyfile
Add Generate key function
2019-09-26 13:58:13 -07:00
Darren Shepherd
f3b73e948e
Merge pull request #3 from erikwilson/single-cert
Refactor to single cert
2019-09-26 13:58:02 -07:00
galal-hussein
5296dd0eba Add Generate key function 2019-09-16 19:04:16 +02:00
Erik Wilson
c08b499d17 Refactor to single cert 2019-07-17 09:46:34 -07:00
Darren Shepherd
4716ac2362
Merge pull request #2 from erikwilson/user-config-ca-cert-key
Use CA cert & key from user tls config
2019-07-02 14:23:29 -07:00
Erik Wilson
54fdba3f13 Use CA cert & key from user tls config 2019-05-28 17:31:11 -07:00
Darren Shepherd
5705628594
Merge pull request #1 from erikwilson/cert-update
Allow client certs and any signing key type
2019-05-25 00:52:42 +02:00
Erik Wilson
cd6eb4881e Allow any type of x509 key 2019-05-17 13:21:28 -07:00
Erik Wilson
23e84783a3 Add RequestClientCert to tls.Config for x509 auth 2019-05-17 13:20:23 -07:00
Darren Shepherd
077eb13a90 Initial Commit 2019-05-09 12:36:03 -07:00