Darren Shepherd
74a61a850d
Always allow configured SANs regardless of the FilterCN
2020-04-17 19:31:31 -07:00
Darren Shepherd
4436fc6b48
Merge pull request #21 from ibuildthecloud/master
...
Add ability to confirm adding new CNs
2020-04-02 22:10:05 -07:00
Darren Shepherd
4bac3f291f
Add ability to confirm adding new CNs
2020-04-02 22:08:36 -07:00
Darren Shepherd
c992ce309c
Reject bad CNs that will prevent the secret from being saved.
2020-04-02 22:07:45 -07:00
Darren Shepherd
763229ddcd
Merge pull request #20 from ibuildthecloud/master
...
Add ability to limit the maximum number of SANs
2020-03-18 23:17:31 -07:00
Darren Shepherd
171fcf6b79
If connection closing is enabled then don't support HTTP/2
2020-03-18 23:16:38 -07:00
Darren Shepherd
05d7922a86
Add ability to limit the maximum number of SANs
2020-03-18 23:16:38 -07:00
Darren Shepherd
1e67d402dc
Merge pull request #19 from ibuildthecloud/master
...
For web browser based requests do not consider IPs in host headers
2020-03-14 10:17:03 -07:00
Darren Shepherd
7e3fc0c594
For web browser based requests do not consider IPs in host headers
2020-03-14 10:16:11 -07:00
Darren Shepherd
111c5b43e9
Merge pull request #18 from ibuildthecloud/dropconn
...
Wrong lock used to protect conn map
2020-02-13 09:53:08 -07:00
Darren Shepherd
bd73d0d4bc
Wrong lock used to protect conn map
2020-02-13 09:52:45 -07:00
Darren Shepherd
5276ad483a
Merge pull request #17 from ibuildthecloud/dropconn
...
Add option to close connections on cert change
2020-02-12 14:13:44 -07:00
Darren Shepherd
8545ce98db
Add option to close connections on cert change
2020-02-12 14:00:40 -07:00
Darren Shepherd
3f92468568
Merge pull request #16 from ibuildthecloud/master
...
Fix acme listener
2020-02-07 14:28:38 -07:00
Darren Shepherd
5ba69b1c5f
Fix acme listener
2020-02-07 14:20:45 -07:00
Darren Shepherd
6281628cd4
Merge pull request #15 from ibuildthecloud/master
...
Add BindHost option
2020-02-05 23:12:55 -07:00
Darren Shepherd
0b114dc0c2
Add BindHost option
2020-02-05 23:11:51 -07:00
Darren Shepherd
ece289ed54
Merge pull request #14 from ibuildthecloud/master
...
Fix merging of the k8s secret to reduce the number of writes
2020-02-04 12:49:56 -07:00
Darren Shepherd
bc68bf5499
Fix merging of the k8s secret to reduce the number of writes
2020-02-04 12:48:38 -07:00
Darren Shepherd
795bb90214
Merge pull request #13 from ibuildthecloud/master
...
Add more helpers
2020-01-30 22:41:53 -07:00
Darren Shepherd
dcc205f52d
mod tidy
2020-01-30 22:41:19 -07:00
Darren Shepherd
4e8035fa46
Fix go fmt/vet issues
2020-01-30 22:41:19 -07:00
Darren Shepherd
a75e84bc81
Add more helpers
2020-01-30 22:41:19 -07:00
Darren Shepherd
ab900b5268
Merge pull request #12 from ibuildthecloud/master
...
Add static storage and listener opts
2019-12-04 11:35:09 -07:00
Darren Shepherd
f1484a07b3
Add static storage and listener opts
2019-12-04 11:32:00 -07:00
Darren Shepherd
b6b942bff0
Merge pull request #11 from ibuildthecloud/master
...
Support old or imported RSA keys
2019-11-15 23:45:38 +00:00
Darren Shepherd
3c2990b7c5
Support old or imported RSA keys
2019-11-15 23:45:14 +00:00
Darren Shepherd
ccf76b35ea
Don't clobber secret key
...
On the start of a new server we do not want to blindly save the
cert because that will change the TLS key. Instead only write
to k8s on start if there is no secret in k8s. On start of the
controller it will sync up if the local file and k8s secret aren't
the same
2019-11-15 23:45:10 +00:00
Darren Shepherd
988d8dd3f4
Add info logging when certs change
2019-11-15 23:43:29 +00:00
Darren Shepherd
736b5d5d8b
Merge pull request #10 from ibuildthecloud/master
...
Don't generate cert for ipv6 address
2019-11-13 14:47:57 +00:00
Darren Shepherd
655c08132d
Don't generate cert for ipv6 address
2019-11-13 14:46:32 +00:00
Darren Shepherd
02b97e01f1
Attempt to minimize additional cert gens
2019-11-13 14:46:32 +00:00
Darren Shepherd
aaa5bc0d2a
Merge pull request #9 from ibuildthecloud/master
...
Save secret to k8s on start
2019-11-10 03:52:54 +00:00
Darren Shepherd
6c7ccae2fc
Save secret to k8s on start
2019-11-10 03:51:22 +00:00
Darren Shepherd
36c5023d47
Wrong address used
...
Fixes three issues
1. Use localaddr, not remoteadd for CN
2. Don't return error from net.Listener.Accept
3. Try three times to save secret
2019-11-09 06:09:10 +00:00
Darren Shepherd
245f86cc34
Merge pull request #8 from ibuildthecloud/master
...
Remove debug statement
2019-11-08 20:58:17 +00:00
Darren Shepherd
f570529af6
Remove debug statement
2019-11-08 20:57:46 +00:00
Darren Shepherd
bcf3a564c5
Merge pull request #7 from ibuildthecloud/master
...
Fix issues in k8s storage
2019-11-08 19:01:28 +00:00
Darren Shepherd
9adf776973
Fix issues in k8s storage
2019-11-08 19:00:53 +00:00
Darren Shepherd
6224794ef3
Merge pull request #6 from ibuildthecloud/master
...
V2
2019-10-30 19:20:09 -07:00
Darren Shepherd
5878218dc0
Update go mod
2019-10-30 19:15:37 -07:00
Darren Shepherd
af04867843
Refactor to not include a server by default
2019-10-30 19:14:34 -07:00
Erik Wilson
8a2488bc86
Merge pull request #5 from galal-hussein/rotate_expired_wrangler
...
rotate expired wrangler cert
2019-10-09 18:11:34 -07:00
galal-hussein
583d996366
rotate wrangler cert
2019-10-10 03:05:39 +02:00
Darren Shepherd
e2ac9e2c19
Merge pull request #4 from galal-hussein/add_generate_keyfile
...
Add Generate key function
2019-09-26 13:58:13 -07:00
Darren Shepherd
f3b73e948e
Merge pull request #3 from erikwilson/single-cert
...
Refactor to single cert
2019-09-26 13:58:02 -07:00
galal-hussein
5296dd0eba
Add Generate key function
2019-09-16 19:04:16 +02:00
Erik Wilson
c08b499d17
Refactor to single cert
2019-07-17 09:46:34 -07:00
Darren Shepherd
4716ac2362
Merge pull request #2 from erikwilson/user-config-ca-cert-key
...
Use CA cert & key from user tls config
2019-07-02 14:23:29 -07:00
Erik Wilson
54fdba3f13
Use CA cert & key from user tls config
2019-05-28 17:31:11 -07:00
