Files
releases/server/testdata/server-key.pem
T
Stephan Renatus 3286c39822 server: add authentication based on TLS
* identifier: add TLSBased

This is only the identifier, the server setup still has to be done.

Note that it diverges a little from what was proposed in the issue:
not every client cert needs to have a CN record -- so instead, we'll
use whatever is the cert's subject as client identity.

* Drive-by fix: identifier_test: don't use same package for TokenBased
  tests.
* server: require and verify client cert for AuthenticationTLS
* server: allow setting CA pool via --tls-ca-cert-file
* server: expose new authentication via parameter
* [nit] server: simplify getListenerForHTTPServer
* server_test: use httptest for integration-y TLS tests
* book/security: mention TLS authn with example

Signed-off-by: Stephan Renatus <srenatus@chef.io>
2019-01-14 12:57:35 -08:00

28 lines
1.6 KiB
Plaintext

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----