- Sort Score
- Result 10 results
- Languages All
Results 11 - 20 of 708 for xtls (0.1 sec)
-
src/crypto/internal/boring/fipstls/tls.go
//go:build boringcrypto // Package fipstls allows control over whether crypto/tls requires FIPS-approved settings. // This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent // of the use of BoringCrypto. package fipstls import ( "internal/stringslite" "sync/atomic" ) var required atomic.Bool // Force forces crypto/tls to restrict TLS configurations to FIPS-approved settings.
Registered: Wed Jun 12 16:32:35 UTC 2024 - Last Modified: Mon May 06 14:00:54 UTC 2024 - 1.7K bytes - Viewed (0) -
pilot/pkg/networking/core/tls.go
// Is there a virtual service with a TLS block that matches us? hasTLSMatch := false lb := &ListenerBuilder{node: node, push: push} out := make([]*filterChainOpts, 0) for _, cfg := range configs { virtualService := cfg.Spec.(*v1alpha3.VirtualService) for _, tls := range virtualService.Tls { for _, match := range tls.Match {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Mar 28 17:09:02 UTC 2024 - 14.7K bytes - Viewed (0) -
tests/integration/pilot/testdata/tunneling/gateway/tls/passthrough/originate-tls.tmpl.yaml
apiVersion: networking.istio.io/v1alpha3 kind: DestinationRule metadata: name: originate-tls-for-external-svc spec: host: {{ .EgressGatewayServiceName | default "istio-egressgateway" }}.{{ .EgressGatewayServiceNamespace | default "istio-system" }}.svc.cluster.local subsets: - name: originate-tls-for-plain-traffic trafficPolicy: tls: mode: SIMPLE sni: external.{{ .externalNamespace }}.svc.cluster.local
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Sat Jan 20 19:37:50 UTC 2024 - 472 bytes - Viewed (0) -
pilot/pkg/credentials/kube/secrets_test.go
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Feb 23 19:18:21 UTC 2024 - 18.4K bytes - Viewed (0) -
pilot/pkg/networking/core/peer_authentication_simulation_test.go
resolution: STATIC ports: - name: http number: 8000 protocol: HTTP ---` mkCall := func(port int, tls simulation.TLSMode) simulation.Call { r := simulation.Call{Protocol: simulation.HTTP, Port: port, CallMode: simulation.CallModeInbound, TLS: tls} if tls == simulation.MTLS { r.Alpn = "istio" } return r } cases := []struct { name string config string
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Jun 13 01:56:28 UTC 2024 - 16.2K bytes - Viewed (0) -
pilot/pkg/networking/core/filterchain_options.go
return inboundPlainTextTCPFilterChainMatchOptions } } } func (opt FilterChainMatchOptions) ToTransportSocket(mtls authn.MTLSSettings) *tls.DownstreamTlsContext { if !opt.TLS { return nil } if opt.Protocol == networking.ListenerProtocolHTTP { return mtls.HTTP } return mtls.TCP
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Mar 28 17:09:02 UTC 2024 - 8.4K bytes - Viewed (0) -
pilot/pkg/serviceregistry/kube/controller/ambient/testdata/peer-authn-unset-port-mtls-permissive.yaml
action: DENY groups: - rules: - matches: - notDestinationPorts: - 9090 name: converted_peer_authentication_strict-mtls
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Feb 29 18:40:34 UTC 2024 - 156 bytes - Viewed (0) -
pilot/pkg/serviceregistry/kube/controller/ambient/testdata/peer-authn-unset-port-mtls-strict-in.yaml
apiVersion: security.istio.io/v1beta1 kind: PeerAuthentication metadata: name: strict-mtls spec: selector: matchLabels: app: a mtls: mode: UNSET portLevelMtls: 8080:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Feb 29 18:40:34 UTC 2024 - 212 bytes - Viewed (0) -
pilot/pkg/security/authn/utils/utils.go
// Compliance for downstream mesh mTLS. authn_model.EnforceCompliance(ctx.CommonTlsContext) return ctx } // GetMinTLSVersion returns the minimum TLS version for workloads based on the mesh config. func GetMinTLSVersion(ver meshconfig.MeshConfig_TLSConfig_TLSProtocol) tls.TlsParameters_TlsProtocol { switch ver { case meshconfig.MeshConfig_TLSConfig_TLSV1_3: return tls.TlsParameters_TLSv1_3 default:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Fri Feb 23 00:16:21 UTC 2024 - 3.8K bytes - Viewed (0) -
pilot/pkg/serviceregistry/kube/controller/ambient/testdata/peer-authn-disable-port-mtls-strict.yaml
action: DENY groups: - rules: - matches: - destinationPorts: - 9090 notPrincipals: - presence: {} name: converted_peer_authentication_disable-strict-mtls
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Feb 29 18:40:34 UTC 2024 - 203 bytes - Viewed (0)