mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-16 21:31:34 -06:00
Stephan Renatus
3286c39822
* identifier: add TLSBased This is only the identifier, the server setup still has to be done. Note that it diverges a little from what was proposed in the issue: not every client cert needs to have a CN record -- so instead, we'll use whatever is the cert's subject as client identity. * Drive-by fix: identifier_test: don't use same package for TokenBased tests. * server: require and verify client cert for AuthenticationTLS * server: allow setting CA pool via --tls-ca-cert-file * server: expose new authentication via parameter * [nit] server: simplify getListenerForHTTPServer * server_test: use httptest for integration-y TLS tests * book/security: mention TLS authn with example Signed-off-by: Stephan Renatus <srenatus@chef.io>
18 lines
973 B
Plaintext
18 lines
973 B
Plaintext
-----BEGIN CERTIFICATE-----
|
|
MIICoDCCAYgCCQDOA0JzmDQJADANBgkqhkiG9w0BAQsFADAQMQ4wDAYDVQQDDAVt
|
|
eS1jYTAeFw0xOTAxMTExMTIyNDBaFw0yMTEwMDcxMTIyNDBaMBQxEjAQBgNVBAMM
|
|
CW15LWNsaWVudDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALUVYoeA
|
|
pg0UEL+ixFwRU16ukrE1CMTSCGAVYaadxMjaFd8QNXzP+lK3eyttEFPoVRZJ6z12
|
|
JxUSRYhiIai2kII2ySrkqWvD9G6To/YJdgw9HdDjkibZxG536jQUAx3NHZib7qL2
|
|
AGd9Sm1XJd9jgORlQ7e26V2y1KOE4v6GUGBzeWPhgYPsCKI16wdr40d9co/s6Ycb
|
|
Ft90r3KdBLW60bCLBgJKYBo/1oVDiVJW8mY+eFwqqdm2G/Fftcyf7UySFCVE8WPg
|
|
Xtb7M3nSlcD8Cc86Z93OfLd+E87THLqDg8vsp++yj3voHoDr4eyiItHVqklbM4Kb
|
|
38JMTsR2UAif5YMCAwEAATANBgkqhkiG9w0BAQsFAAOCAQEAuTKYwIfvnWgL0Lw+
|
|
oT054kwhcODyzQ0kHXNhxywPCEWRF8n9uDQOyy4nG7zHtIf2LG5iB/uwhS4QLpZ+
|
|
k09rWI3+pVKyPOHTwBiUHmfKz5Neh+VGbY4hW4TvQT/XQgTTAcvc3dMAP/0KN9wp
|
|
YjE9COBVNZT1pxDooczQA8KwhIIQY8v8TnFyh0tOGX9o4F6VtLoEPrvfphh4ozNh
|
|
2cP6HD+BvygsK53jl7xN94RQeAq4PCw+GZR47JN/QCe9tkHVLe2McDZoMsxCtoBX
|
|
gK4rc4gLmUaSdsrSnU9isJM5nUz+6m705dzCjJZhM70LYbWiqbChs+YqCHsJChOj
|
|
PmigKg==
|
|
-----END CERTIFICATE-----
|