mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-24 01:04:49 -06:00
3286c39822
* identifier: add TLSBased This is only the identifier, the server setup still has to be done. Note that it diverges a little from what was proposed in the issue: not every client cert needs to have a CN record -- so instead, we'll use whatever is the cert's subject as client identity. * Drive-by fix: identifier_test: don't use same package for TokenBased tests. * server: require and verify client cert for AuthenticationTLS * server: allow setting CA pool via --tls-ca-cert-file * server: expose new authentication via parameter * [nit] server: simplify getListenerForHTTPServer * server_test: use httptest for integration-y TLS tests * book/security: mention TLS authn with example Signed-off-by: Stephan Renatus <srenatus@chef.io>
28 lines
1.6 KiB
Plaintext
28 lines
1.6 KiB
Plaintext
-----BEGIN RSA PRIVATE KEY-----
|
|
MIIEowIBAAKCAQEAv4WZbiCVj4yfITYSH5Bocph7xy+gvsCVYUWZU8Nulgo3OLx4
|
|
q1qRKMjGqDvhMK6BvPoEbUoMRHn8Jk9ABIMdLKBwpby9oovZOwSYh8NLrkmaUlzT
|
|
DQlzDEdKYf428b0n6HOZ045GU5Tvm06ER2fa/qqlsCfP6adr9+u0KnL9KIZkh1PM
|
|
69vUF+JteXAyDnYrciINRcEq9Fb6gcMG3mBr0jAKVDA7KtFf/diPfEtKxtASYq98
|
|
g7AY5JgjI8lovGkXQMJckCQxWQ+uaX1tr7tRpNLMM7n6MTV3HvKAp8zCjijOcog/
|
|
7h0atd3n3u2tCbchEPnT+Jt/ikFa3VFs3oJzFwIDAQABAoIBAFlZy+Xr/7qT4V2O
|
|
K1Bcf84Ow5h+6OB1WnuiC9FfWMVZCMBIdYeD3jsHyF6OaRXcJBz1C4GtTSHZQ0Dg
|
|
Mj6oqMC8LTG1Z0dhNTxqfXrBKxqprfyE39WyNeFhlRs4jYukMu0omXhwZPDziAGN
|
|
1Pq3Qh0Toe8X89DPUfi9FzXCpcb0dIMJQLUMt2PLXTlcx4PD8wXR9m5hJsuevgc5
|
|
WEUCqS97F0d/4ilTVlUu9pbRF4KpPvbXabDi7xcyk5qQDRv7/4kVQrK0IbXRjFTo
|
|
RRooip8o4lVy0pZN03mTEAZo4OZvJ/rOqfFmpZyBeJxIIgCrhtvTO8E1OmBkRrrl
|
|
+20W/IkCgYEA823mJallv/CzC1mUBFA3ESughsvfhT6vkZ6q+MjYlRf2hKPWtfY+
|
|
dA/wwkNIrjVsW/B+CPply/bYH4CY9VFYMstQI4VcsVDZF33Hc3yFWGQwgMwnnAh+
|
|
OGsQrJ2sUcuHsoXrssFk9MdByc9kdLt7lBN5qvPsGaEIMbY4lEca3L0CgYEAyWl9
|
|
1PTEF+IRufusLZrImFSl2DnMkkUNImvi80NMFqUFtof5c/sMWPs7ilvixFMFrANE
|
|
Nd4isFA52Wl4PhDsRgkLZ/BSj7cAtX6dq74pTIotR6ApnV9+9MI2Q3QCuP2Bu4ck
|
|
1qeAlffLTkx78lOyFtRfVXMH+DixZNdhq6DrzmMCgYAEYCNU5fiYPKFbQN7yPObg
|
|
fiJCigOYh4nsWifElQeflnCt7av8VVLGD0tKkp8J0pgCBw6c5rNRuTwlRNB7CF1H
|
|
fHQST2FdJpDgZThikQhskFB24DSOD3EFXpdMIwFn7vqfcNzNt8AyzioWkI3Ds2MD
|
|
RF5ZfkzuIQDes+HMeIK5GQKBgQCqCxgjTKqph0F0BZitv/oPMZf634FpFEcsgm1O
|
|
98grbhNOsanXU2JvVVxFSaJAId+uA+v4lpwuwuy0MylDLUJtNoGctPbfQp+km0s+
|
|
jgOMDTSBPiUkKlWjCryJYk5SJCT9T/G4EB6tflD0v/n88tBuGcqK990IocSS4Iwj
|
|
PG8ZBQKBgGwZfRkYKoVB4VjewHL1+JLPvWOcsCEc+3T6mkizxpPK7fewi2YChcCn
|
|
q8YrTP41ZUlcwALbxsSD2SQPjcjFKhgiFOOezV3qJ/oDC4+SC0/1jAQHWHC20kKZ
|
|
ZyWBL6FdR+yUY7Zafo16M49ioZh8hYrA6gYDC/Zm/sKXdIaTveQU
|
|
-----END RSA PRIVATE KEY-----
|