- Sort Score
- Result 10 results
- Languages All
Results 1 - 9 of 9 for trustAnchors (1.53 sec)
-
pilot/pkg/trustbundle/trustbundle.go
} // GetTrustBundle : Retrieves all the trustAnchors for current Spiffee Trust Domain func (tb *TrustBundle) GetTrustBundle() []string { tb.mutex.RLock() defer tb.mutex.RUnlock() trustedCerts := make([]string, len(tb.mergedCerts)) copy(trustedCerts, tb.mergedCerts) return trustedCerts } func verifyTrustAnchor(trustAnchor string) error { block, _ := pem.Decode([]byte(trustAnchor)) if block == nil {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 23 21:07:03 UTC 2024 - 7.8K bytes - Viewed (0) -
pkg/volume/projected/projected.go
allowEmpty := false if source.ClusterTrustBundle.Optional != nil && *source.ClusterTrustBundle.Optional { allowEmpty = true } var trustAnchors []byte if source.ClusterTrustBundle.Name != nil { var err error trustAnchors, err = s.plugin.kvHost.GetTrustAnchorsByName(*source.ClusterTrustBundle.Name, allowEmpty) if err != nil { errlist = append(errlist, err) continue }
Registered: Sat Jun 15 01:39:40 UTC 2024 - Last Modified: Tue May 14 06:17:25 UTC 2024 - 12.8K bytes - Viewed (0) -
security/pkg/nodeagent/cache/secretcache.go
} // mergeTrustAnchorBytes: Merge cert bytes with the cached TrustAnchors. func (sc *SecretManagerClient) mergeTrustAnchorBytes(caCerts []byte) []byte { return sc.mergeConfigTrustBundle(pkiutil.PemCertBytestoString(caCerts)) } // mergeConfigTrustBundle: merge rootCerts trustAnchors provided in args with proxyConfig trustAnchors // ensure dedup and sorting before returning trustAnchors
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Mar 04 08:29:46 UTC 2024 - 28.2K bytes - Viewed (0) -
pilot/pkg/model/context.go
// CONFIG AND PUSH pushContext *PushContext // DomainSuffix provides a default domain for the Istio server. DomainSuffix string ledger ledger.Ledger // TrustBundle: List of Mesh TrustAnchors TrustBundle *trustbundle.TrustBundle clusterLocalServices ClusterLocalProvider CredentialsController credentials.MulticlusterController GatewayAPIController GatewayController
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Jun 03 08:29:05 UTC 2024 - 33.6K bytes - Viewed (1) -
pilot/pkg/bootstrap/server.go
cacertsWatcher *fsnotify.Watcher dnsNames []string CA *ca.IstioCA RA ra.RegistrationAuthority caServer *caserver.Server // TrustAnchors for workload to workload mTLS workloadTrustBundle *tb.TrustBundle certMu sync.RWMutex istiodCert *tls.Certificate
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 17:48:28 UTC 2024 - 46.3K bytes - Viewed (0) -
okhttp/src/main/kotlin/okhttp3/internal/platform/AndroidPlatform.kt
) : TrustRootIndex { override fun findByIssuerAndSignature(cert: X509Certificate): X509Certificate? { return try { val trustAnchor = findByIssuerAndSignatureMethod.invoke( trustManager, cert, ) as TrustAnchor trustAnchor.trustedCert } catch (e: IllegalAccessException) { throw AssertionError("unable to get issues and signature", e)
Registered: Sun Jun 16 04:42:17 UTC 2024 - Last Modified: Mon Jan 08 01:13:22 UTC 2024 - 6.2K bytes - Viewed (0) -
pilot/pkg/trustbundle/trustbundle_test.go
expectTbCount(t, tb, 2, 3*time.Second, "server1(running) trustAnchor not updated in bundle") // Test3: Stop server1 server1.Close() // Check server1's valid trustAnchor is no longer in the trustbundle within poll frequency window expectTbCount(t, tb, 1, 6*time.Second, "server1(stopped) trustAnchor not removed from bundle") // Test4: Update with server1, server2 and mesh pem ca
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 23 21:07:03 UTC 2024 - 13.1K bytes - Viewed (0) -
security/pkg/nodeagent/cache/secretcache_test.go
checkSecret(t, sc, security.RootCertReqResourceName, security.SecretItem{ ResourceName: security.RootCertReqResourceName, RootCert: concatCerts(string(rootCert), string(caClientRootCert)), }) // Check request for non-workload root-certs doesn't configuration with ProxyConfig TrustAnchor
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu May 16 22:12:28 UTC 2024 - 23.9K bytes - Viewed (0) -
pilot/pkg/features/pilot.go
MultiRootMesh = env.Register("ISTIO_MULTIROOT_MESH", false, "If enabled, mesh will support certificates signed by more than one trustAnchor for ISTIO_MUTUAL mTLS").Get() EnableEnvoyFilterMetrics = env.Register("PILOT_ENVOY_FILTER_STATS", false, "If true, Pilot will collect metrics for envoy filter operations.").Get()
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 17:48:28 UTC 2024 - 13.3K bytes - Viewed (0)