Commit Graph

84 Commits

Author SHA1 Message Date
Darren Shepherd
dcc205f52d mod tidy 2020-01-30 22:41:19 -07:00
Darren Shepherd
4e8035fa46 Fix go fmt/vet issues 2020-01-30 22:41:19 -07:00
Darren Shepherd
a75e84bc81 Add more helpers 2020-01-30 22:41:19 -07:00
Darren Shepherd
ab900b5268
Merge pull request #12 from ibuildthecloud/master
Add static storage and listener opts
2019-12-04 11:35:09 -07:00
Darren Shepherd
f1484a07b3 Add static storage and listener opts 2019-12-04 11:32:00 -07:00
Darren Shepherd
b6b942bff0
Merge pull request #11 from ibuildthecloud/master
Support old or imported RSA keys
2019-11-15 23:45:38 +00:00
Darren Shepherd
3c2990b7c5 Support old or imported RSA keys 2019-11-15 23:45:14 +00:00
Darren Shepherd
ccf76b35ea Don't clobber secret key
On the start of a new server we do not want to blindly save the
cert because that will change the TLS key.  Instead only write
to k8s on start if there is no secret in k8s.  On start of the
controller it will sync up if the local file and k8s secret aren't
the same
2019-11-15 23:45:10 +00:00
Darren Shepherd
988d8dd3f4 Add info logging when certs change 2019-11-15 23:43:29 +00:00
Darren Shepherd
736b5d5d8b
Merge pull request #10 from ibuildthecloud/master
Don't generate cert for ipv6 address
2019-11-13 14:47:57 +00:00
Darren Shepherd
655c08132d Don't generate cert for ipv6 address 2019-11-13 14:46:32 +00:00
Darren Shepherd
02b97e01f1 Attempt to minimize additional cert gens 2019-11-13 14:46:32 +00:00
Darren Shepherd
aaa5bc0d2a
Merge pull request #9 from ibuildthecloud/master
Save secret to k8s on start
2019-11-10 03:52:54 +00:00
Darren Shepherd
6c7ccae2fc Save secret to k8s on start 2019-11-10 03:51:22 +00:00
Darren Shepherd
36c5023d47 Wrong address used
Fixes three issues
1. Use localaddr, not remoteadd for CN
2. Don't return error from net.Listener.Accept
3. Try three times to save secret
2019-11-09 06:09:10 +00:00
Darren Shepherd
245f86cc34
Merge pull request #8 from ibuildthecloud/master
Remove debug statement
2019-11-08 20:58:17 +00:00
Darren Shepherd
f570529af6 Remove debug statement 2019-11-08 20:57:46 +00:00
Darren Shepherd
bcf3a564c5
Merge pull request #7 from ibuildthecloud/master
Fix issues in k8s storage
2019-11-08 19:01:28 +00:00
Darren Shepherd
9adf776973 Fix issues in k8s storage 2019-11-08 19:00:53 +00:00
Darren Shepherd
6224794ef3
Merge pull request #6 from ibuildthecloud/master
V2
2019-10-30 19:20:09 -07:00
Darren Shepherd
5878218dc0 Update go mod 2019-10-30 19:15:37 -07:00
Darren Shepherd
af04867843 Refactor to not include a server by default 2019-10-30 19:14:34 -07:00
Erik Wilson
8a2488bc86
Merge pull request #5 from galal-hussein/rotate_expired_wrangler
rotate expired wrangler cert
2019-10-09 18:11:34 -07:00
galal-hussein
583d996366 rotate wrangler cert 2019-10-10 03:05:39 +02:00
Darren Shepherd
e2ac9e2c19
Merge pull request #4 from galal-hussein/add_generate_keyfile
Add Generate key function
2019-09-26 13:58:13 -07:00
Darren Shepherd
f3b73e948e
Merge pull request #3 from erikwilson/single-cert
Refactor to single cert
2019-09-26 13:58:02 -07:00
galal-hussein
5296dd0eba Add Generate key function 2019-09-16 19:04:16 +02:00
Erik Wilson
c08b499d17 Refactor to single cert 2019-07-17 09:46:34 -07:00
Darren Shepherd
4716ac2362
Merge pull request #2 from erikwilson/user-config-ca-cert-key
Use CA cert & key from user tls config
2019-07-02 14:23:29 -07:00
Erik Wilson
54fdba3f13 Use CA cert & key from user tls config 2019-05-28 17:31:11 -07:00
Darren Shepherd
5705628594
Merge pull request #1 from erikwilson/cert-update
Allow client certs and any signing key type
2019-05-25 00:52:42 +02:00
Erik Wilson
cd6eb4881e Allow any type of x509 key 2019-05-17 13:21:28 -07:00
Erik Wilson
23e84783a3 Add RequestClientCert to tls.Config for x509 auth 2019-05-17 13:20:23 -07:00
Darren Shepherd
077eb13a90 Initial Commit 2019-05-09 12:36:03 -07:00