mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-23 16:55:48 -06:00
Stephan Renatus
3286c39822
* identifier: add TLSBased This is only the identifier, the server setup still has to be done. Note that it diverges a little from what was proposed in the issue: not every client cert needs to have a CN record -- so instead, we'll use whatever is the cert's subject as client identity. * Drive-by fix: identifier_test: don't use same package for TokenBased tests. * server: require and verify client cert for AuthenticationTLS * server: allow setting CA pool via --tls-ca-cert-file * server: expose new authentication via parameter * [nit] server: simplify getListenerForHTTPServer * server_test: use httptest for integration-y TLS tests * book/security: mention TLS authn with example Signed-off-by: Stephan Renatus <srenatus@chef.io>
18 lines
973 B
Plaintext
18 lines
973 B
Plaintext
-----BEGIN CERTIFICATE-----
|
|
MIICojCCAYoCCQDOA0JzmDQJATANBgkqhkiG9w0BAQsFADAQMQ4wDAYDVQQDDAVt
|
|
eS1jYTAeFw0xOTAxMTExMTIyNDBaFw0yMTEwMDcxMTIyNDBaMBYxFDASBgNVBAMM
|
|
C215LWNsaWVudC0yMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4WZ
|
|
biCVj4yfITYSH5Bocph7xy+gvsCVYUWZU8Nulgo3OLx4q1qRKMjGqDvhMK6BvPoE
|
|
bUoMRHn8Jk9ABIMdLKBwpby9oovZOwSYh8NLrkmaUlzTDQlzDEdKYf428b0n6HOZ
|
|
045GU5Tvm06ER2fa/qqlsCfP6adr9+u0KnL9KIZkh1PM69vUF+JteXAyDnYrciIN
|
|
RcEq9Fb6gcMG3mBr0jAKVDA7KtFf/diPfEtKxtASYq98g7AY5JgjI8lovGkXQMJc
|
|
kCQxWQ+uaX1tr7tRpNLMM7n6MTV3HvKAp8zCjijOcog/7h0atd3n3u2tCbchEPnT
|
|
+Jt/ikFa3VFs3oJzFwIDAQABMA0GCSqGSIb3DQEBCwUAA4IBAQAtTXalo8+0Cg7d
|
|
9gzMODAgCSynumzTmOyH1IYL8UmNgHImG26EpDmda2EKsIDTcgQV1dKDKPCTJwoB
|
|
akBwb9+EwqEMd7h7bGKhPizg7tguIz4h08UYZkoVcyEiU8Azc6X8dLcYjKNTl5XH
|
|
wIX8wEt+yU973bWKqFuMqNT7Ex70efDX2DVa5ZOrIKltyx5K0cv0qQZ7HZULIMyh
|
|
iWGC3LiB48gMRx7CkyCiBvCAg/Ux8/dNi87p72pzerpyRJt0VbU94SW9tsVLWeOj
|
|
KtGdnzH2J9Uop4+B7Aa/TBqsXue0JFJRkjf5YbVkY1b6SFPQA7t2mbf42DILC7Ff
|
|
rmNWH95k
|
|
-----END CERTIFICATE-----
|