mirror of
https://github.com/open-policy-agent/opa.git
synced 2026-08-13 03:42:35 -06:00
Stephan Renatus
3286c39822
* identifier: add TLSBased This is only the identifier, the server setup still has to be done. Note that it diverges a little from what was proposed in the issue: not every client cert needs to have a CN record -- so instead, we'll use whatever is the cert's subject as client identity. * Drive-by fix: identifier_test: don't use same package for TokenBased tests. * server: require and verify client cert for AuthenticationTLS * server: allow setting CA pool via --tls-ca-cert-file * server: expose new authentication via parameter * [nit] server: simplify getListenerForHTTPServer * server_test: use httptest for integration-y TLS tests * book/security: mention TLS authn with example Signed-off-by: Stephan Renatus <srenatus@chef.io>
19 lines
1.1 KiB
Plaintext
19 lines
1.1 KiB
Plaintext
-----BEGIN CERTIFICATE-----
|
|
MIIC8zCCAdugAwIBAgIJAMHu6iWKhLk/MA0GCSqGSIb3DQEBCwUAMBAxDjAMBgNV
|
|
BAMMBW15LWNhMB4XDTE5MDExMTExMjI0MFoXDTIxMTAwNzExMjI0MFowEDEOMAwG
|
|
A1UEAwwFbXktY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7RmRo
|
|
rdbz/cObXySp8ul4430gWuQxo0GKplxf4TECSpNxY3HUZ3bdexi/d06ZQSdxPbKg
|
|
DXwvuzNz2NrBk++CgSYU8clwiFpjB0WIzQZDe1rMRSYfD75n6AcqXj+0uz/M+bEy
|
|
HQUGgRqLdmWwLB7APvgqHXbjpPVHWi1iQDWsflmXK5FzHwIOc20H0CgszfpTY3q4
|
|
uDbeXunlwsdpBsT0rV6F4sipO/qpbPuXQ54pXE7OcFyvEJKE++NXOEGkxML1hLws
|
|
SI3kVYgkHVp9uRNm7+wijTDY8xdNqGEiP9nEg9uFbR0hvhIWWqmHY4vOLiCKZTYC
|
|
V8baC7Y3g6Osi+2hAgMBAAGjUDBOMB0GA1UdDgQWBBRQEkQ+CO07gADyd2girlSx
|
|
VTS27jAfBgNVHSMEGDAWgBRQEkQ+CO07gADyd2girlSxVTS27jAMBgNVHRMEBTAD
|
|
AQH/MA0GCSqGSIb3DQEBCwUAA4IBAQCb532T6FXc83aahdyhd1PgqqrQQqb80j5H
|
|
ep5nkLPUwf4qOfMqVG75n7WmlUKe7eVU0R4vp1frUGazh6/GV9ZoaEp2/Gh/JIUc
|
|
KEz2a6zvu8+13vRTfp5B3P06ek0FaqAljer6oSfV6/tMTQ9ArLezVdnvfX4+gf7h
|
|
2443SDo6g0LeFXc4CeIrff1b3sOqpvn2F+b87qQFy0EDRbF2i8p2ZmheompWPlmw
|
|
d0LXd8aXHWOzfpUkI5mLMiN7Ft1j8k701SeuOsawIDmTy3looN+tq1kl7cJswWrs
|
|
uwK+XpX0qg815BB5jcEwOvpk+bMKzBhkIf8VGFBL88A6anwuX6k7
|
|
-----END CERTIFICATE-----
|