summaryrefslogtreecommitdiffstats
path: root/vespa-athenz/src/test
Commit message (Collapse)AuthorAgeFilesLines
* Do not implement unexported interfaceMartin Polden2020-10-291-5/+7
|
* Move AwsCredentialsProvider to vespa-athenzMartin Polden2020-10-281-0/+36
|
* Minor unification of tests.Henning Baldersheim2020-08-122-12/+7
|
* Revert "Revert "Expose underlying certificate and private key from ↵Bjørn Christian Seime2020-06-021-18/+11
| | | | SiaIdentityProvider ""
* Revert "Expose underlying certificate and private key from SiaIdentityProvider "Harald Musum2020-05-281-11/+18
|
* Provide path to trust stores from ServiceIdentityProviderBjørn Christian Seime2020-05-181-12/+5
| | | | | Model distinction between the Athenz and client trust store. Cleanup constructors and config for SiaIdentityProvider.
* Expose underlying certificate and private key from SiaIdentityProviderBjørn Christian Seime2020-05-181-6/+6
| | | | | | Extend ServiceIdentityProvider interface with new methods. Add class that bundles certificate with private key. Use Path instead of File for better compatibility with mocked file system in unit tests.
* Remove dead codeHarald Musum2019-12-101-99/+0
|
* Make SiaIdentityProvider trust store type configurableMartin Polden2019-10-211-1/+32
|
* Use mockito-core 3.1.0Håkon Hallingstad2019-10-181-2/+2
|
* Remove unused credentials providerMorten Tokle2019-09-091-35/+0
|
* Revert "Include instance hostname in Athenz node certificates"Bjørn Christian Seime2019-08-281-1/+1
| | | | This reverts commit aca45ba95c5fb0b7d9c1fe89ee3a866ff65c76ac.
* Include instance hostname in Athenz node certificatesBjørn Christian Seime2019-08-261-1/+1
|
* Allow applications to re-use SSLContext returned by providerBjørn Christian Seime2019-07-031-9/+57
| | | | | | - Use MutableX509KeyManager instead of re-creating SSLContext when credentials are updated. - Make AthenzIdentityProviderImpl responsible for creating initial SSLContext. - Use proper x509 certificates and keys in unit test instead of Mockito mocks.
* Use AutoReloadingX509KeyManager in SiaIdentityProviderBjørn Christian Seime2019-07-031-4/+1
| | | | | | The SSLContext instance provided by SiaIdentityProvider can now be reused as the underlying key manager will automatically update the key material every hour.
* Use AthenzIdentity instead of AthensServiceHåkon Hallingstad2019-04-101-1/+2
|
* Fix refresh logicMorten Tokle2019-02-221-0/+35
|
* TestJon Marius Venstad2019-01-111-0/+3
|
* Remove deprecated types from vespa-athenzBjørn Christian Seime2018-10-175-166/+1
|
* Rename InstanceCsrGenerator -> CsrGeneratorMorten Tokle2018-10-051-2/+2
|
* Add OU field to csrMorten Tokle2018-10-041-0/+37
|
* Add copyright headerJon Bratseth2018-10-017-7/+14
|
* Revert "Replace RSA with EC in unit test"Bjørn Christian Seime2018-09-121-2/+2
| | | | This reverts commit bdb057ecfac68acaaeecc2fe54ae989e0fba2c75.
* Remove most deprecated types from com.yahoo.vespa.athenz.tlsBjørn Christian Seime2018-09-119-303/+17
| | | | Pkcs10Csr and related classes are not removed as they are currently in use.
* Replace RSA with EC in unit testBjørn Christian Seime2018-09-111-2/+2
|
* Replace use of com.yahoo.vespa.athenz.tls with com.yahoo.securityBjørn Christian Seime2018-09-071-2/+2
|
* Replace use of com.yahoo.vespa.athenz.tls with com.yahoo.securityBjørn Christian Seime2018-09-053-28/+23
| | | | - Use replace RSA with EC in unit tests where possible
* Remove workaround for missing identity typeBjørn Christian Seime2018-08-161-12/+0
|
* Remove 'dnsSuffix' and 'ztsEndpoint' from identity documentBjørn Christian Seime2018-08-151-3/+2
|
* Remove wrapped document structure from SignedIdentityDocumentBjørn Christian Seime2018-08-151-1/+1
|
* Revert "Bjorncs/remove wrapped identity document"Morten Tokle2018-08-071-2/+3
|
* Merge pull request #6482 from ↵Bjørn Christian Seime2018-08-061-3/+2
|\ | | | | | | | | vespa-engine/bjorncs/remove-wrapped-identity-document Bjorncs/remove wrapped identity document
| * Remove 'dnsSuffix' and 'ztsEndpoint' from identity documentBjørn Christian Seime2018-07-261-3/+2
| |
| * Remove wrapped document structure from SignedIdentityDocumentBjørn Christian Seime2018-07-261-1/+1
| |
* | Add utility method to find all services from sia directoryBjørn Christian Seime2018-07-261-0/+40
|/
* Handle zms keys in addition to zts keysBjørn Christian Seime2018-07-251-1/+13
|
* Move NTokenValidator to vespa-athenz + load pub keys from fileBjørn Christian Seime2018-07-251-0/+87
| | | | | | | - Move NTokenValidator from controller-server to vespa-athenz - Remodel ZmsKeystore as AthenzTruststore - Use file-backed truststore on controller (replaces download of public keys) - Remove ZmsClient.getPublicKey/getPublicKeys
* Write private keys in PKCS#1Morten Tokle2018-07-251-2/+2
|
* Revert "Move NTokenValidator to vespa-athenz + load pub keys from file"Harald Musum2018-07-091-87/+0
|
* Move NTokenValidator to vespa-athenz + load pub keys from fileBjørn Christian Seime2018-07-091-0/+87
| | | | | | | - Move NTokenValidator from controller-server to vespa-athenz - Remodel ZmsKeystore as AthenzTruststore - Use file-backed truststore on controller (replaces download of public keys) - Remove ZmsClient.getPublicKey/getPublicKeys
* Add data type for resource nameBjørn Christian Seime2018-06-201-0/+21
|
* Add method to ZtsClient to retrieve identity certificateBjørn Christian Seime2018-06-152-10/+20
|
* Remove support for ntokensBjørn Christian Seime2018-06-131-2/+2
|
* Separate generating and validating signature to separate classBjørn Christian Seime2018-06-121-0/+50
| | | | | - Move signature logic to IdentityDocumentSigner - Stop using fields from deprecated IdentityDocument to generate signature
* Use mutual TLS auth when communicating with ZTSBjørn Christian Seime2018-06-111-57/+10
| | | | | - Remove instance register/refresh from ad-hoc ZtsClient implementation - Deprecate ad-hoc ZtsClient
* Use mutual TLS auth when retrieving identity documentBjørn Christian Seime2018-06-111-12/+12
|
* Add identity type to unique instance id and signed identity documentBjørn Christian Seime2018-06-072-2/+17
|
* Prepare for inlining of 'IdentityDocument' into 'SignedIdentityDocument'Bjørn Christian Seime2018-06-071-1/+5
|
* Revert "Prepare for inlining of 'IdentityDocument' into ↵Jon Marius Venstad2018-06-031-5/+1
| | | | | | 'SignedIdentityDocument'" This reverts commit 48ea96e26f4cc037f0cf81a303b4617ea8e2441d.
* Revert "Add identity type to unique instance id and signed identity document"Jon Marius Venstad2018-06-032-17/+2
| | | | This reverts commit cfa6d7bb63402b83c84a16411a207e946de33246.