- Sort Score
- Result 10 results
- Languages All
Results 111 - 120 of 1,465 for xtls (0.04 sec)
-
internal/config/notify/help.go
}, config.HelpKV{ Key: target.WebhookClientCert, Description: "client cert for Webhook mTLS auth", Optional: true, Type: "string", Sensitive: true, }, config.HelpKV{ Key: target.WebhookClientKey, Description: "client cert key for Webhook mTLS auth", Optional: true, Type: "string", Sensitive: true, }, }
Registered: Sun Jun 16 00:44:34 UTC 2024 - Last Modified: Tue Mar 19 04:37:54 UTC 2024 - 18.8K bytes - Viewed (0) -
pkg/config/analysis/analyzers/testdata/destinationrule-mutual-destination.yaml
# No caCertificates when mode is mutual at destination level apiVersion: networking.istio.io/v1alpha3 kind: DestinationRule metadata: name: db-mtls spec: host: mydbserver.prod.svc.cluster.local trafficPolicy: tls: mode: MUTUAL clientCertificate: /etc/certs/myclientcert.pem
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Nov 17 12:28:05 UTC 2021 - 348 bytes - Viewed (0) -
security/pkg/server/ca/authenticate/cert_authenticator.go
}, nil } // authenticateHTTP performs mTLS authentication for http requests. Requires having the endpoints on a listener // with proper TLS configuration. func (cca *ClientCertAuthenticator) authenticateHTTP(req *http.Request) (*security.Caller, error) { if req.TLS == nil || req.TLS.VerifiedChains == nil { return nil, fmt.Errorf("no client certificate is presented") } chains := req.TLS.VerifiedChains
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Tue Jul 19 02:12:12 UTC 2022 - 3.1K bytes - Viewed (0) -
tests/integration/security/filebased_tls_origination/destination_rule_tls_test.go
apiVersion: networking.istio.io/v1alpha3 kind: DestinationRule metadata: name: db-mtls spec: exportTo: ["."] host: server trafficPolicy: tls: mode: MUTUAL clientCertificate: /etc/certs/custom/cert-chain.pem privateKey: /etc/certs/custom/key.pem caCertificates: /etc/certs/custom/root-cert.pem sni: server `).ApplyOrFail(t)
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 2.1K bytes - Viewed (0) -
pilot/pkg/networking/core/cluster_tls_test.go
result: expectedResult{ tlsContext: &tls.UpstreamTlsContext{ CommonTlsContext: &tls.CommonTlsContext{ TlsParams: &tls.TlsParameters{ // if not specified, envoy use TLSv1_2 as default for client. TlsMaximumProtocolVersion: tls.TlsParameters_TLSv1_3, TlsMinimumProtocolVersion: tls.TlsParameters_TLSv1_2, }, TlsCertificateSdsSecretConfigs: []*tls.SdsSecretConfig{ {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon May 06 03:53:05 UTC 2024 - 60.9K bytes - Viewed (0) -
pilot/pkg/networking/core/gateway.go
} else { // build http connection manager with TLS context, for HTTPS servers using simple/mutual TLS // build listener with tcp proxy, with or without TLS context, for TCP servers // or TLS servers using simple/mutual/passthrough TLS // or HTTPS servers using passthrough TLS // This process typically yields multiple filter chain matches (with SNI) [if TLS is used] for _, server := range serversForPort.Servers {
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon May 06 04:44:06 UTC 2024 - 46.4K bytes - Viewed (0) -
operator/cmd/mesh/testdata/manifest-generate/input/gateways.yaml
ports: ## You can add custom gateway ports - google ILB default quota is 5 ports, - port: 15011 name: grpc-pilot-mtls - port: 8060 targetPort: 8060 name: tcp-citadel-grpc-tls # Port 5353 is forwarded to kube-dns - port: 5353 name: tcp-dns overlays: - kind: Deployment
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Thu Apr 18 18:16:49 UTC 2024 - 1.5K bytes - Viewed (0) -
releasenotes/notes/tls-redirect.yaml
John Howard <******@****.***> 1610556566 -0800
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Wed Jan 13 16:49:26 UTC 2021 - 191 bytes - Viewed (0) -
src/crypto/tls/bogo_config.json
"Compliance-fips*": "No FIPS", "*DTLS*": "No DTLS", "SendEmptyRecords*": "crypto/tls doesn't implement spam protections", "SendWarningAlerts*": "crypto/tls doesn't implement spam protections", "TooManyKeyUpdates": "crypto/tls doesn't implement spam protections (TODO: I think?)", "KyberNotEnabledByDefaultInClients": "crypto/tls intentionally enables it",
Registered: Wed Jun 12 16:32:35 UTC 2024 - Last Modified: Tue Jun 04 15:52:42 UTC 2024 - 19.3K bytes - Viewed (0) -
tests/integration/security/pass_through_filter_chain_test.go
// The request should be denied on port 8085 and 8071. name: "STRICT with DISABLE", config: `apiVersion: security.istio.io/v1beta1 kind: PeerAuthentication metadata: name: {{ .To.ServiceName }}-mtls spec: selector: matchLabels: app: {{ .To.ServiceName }} mtls: mode: STRICT portLevelMtls:
Registered: Fri Jun 14 15:00:06 UTC 2024 - Last Modified: Mon Apr 08 22:02:59 UTC 2024 - 11.9K bytes - Viewed (0)