summaryrefslogtreecommitdiffstats
path: root/vespa-athenz
Commit message (Collapse)AuthorAgeFilesLines
* Replace use of com.yahoo.vespa.athenz.tls with com.yahoo.securityBjørn Christian Seime2018-09-074-5/+5
|
* Replace use of com.yahoo.vespa.athenz.tls with com.yahoo.securityBjørn Christian Seime2018-09-058-48/+43
| | | | - Use replace RSA with EC in unit tests where possible
* Deprecate crypto utilities in com.yahoo.vespa.athenz.tlsBjørn Christian Seime2018-09-0514-0/+28
|
* Merge pull request #6593 from ↵Bjørn Christian Seime2018-08-284-76/+0
|\ | | | | | | | | vespa-engine/bjorncs/use-ssl-socket-factory-node-admin Bjorncs/use ssl socket factory node admin
| * Remove listener interface from ServiceIdentityProviderBjørn Christian Seime2018-08-154-76/+0
| |
* | Remove workaround for missing identity typeBjørn Christian Seime2018-08-163-39/+7
| |
* | Merge pull request #6542 from ↵Bjørn Christian Seime2018-08-167-349/+15
|\ \ | |/ |/| | | | | vespa-engine/bjorncs/remove-wrapped-identity-document Bjorncs/remove wrapped identity document
| * Remove 'dnsSuffix' and 'ztsEndpoint' from identity documentBjørn Christian Seime2018-08-154-36/+3
| |
| * Remove wrapped document structure from SignedIdentityDocumentBjørn Christian Seime2018-08-157-317/+16
| |
* | Revert "Remove listener interface from ServiceIdentityProvider"Bjørn Christian Seime2018-08-154-0/+76
| | | | | | | | This reverts commit 90cdc3376e9a899674264d9ffa2edf3286b248a7.
* | Remove listener interface from ServiceIdentityProviderBjørn Christian Seime2018-08-144-76/+0
| |
* | Remove SiaBackedApacheHttpClientBjørn Christian Seime2018-08-141-189/+0
| |
* | Use ServiceIdentitySslSocketFactory in DefaultZtsClientBjørn Christian Seime2018-08-141-4/+6
| |
* | Add SSLSocketFactory backed by ServiceIdentityProviderBjørn Christian Seime2018-08-141-0/+100
|/
* Rename 'refer' -> 'acquire'Bjørn Christian Seime2018-08-141-5/+5
|
* Update DefaultZtsClient to use new http client interfaceBjørn Christian Seime2018-08-141-8/+21
|
* Make SiaBackedApacheHttpClient a CloseableHttpClientBjørn Christian Seime2018-08-141-48/+116
|
* Merge pull request #6564 from vespa-engine/bjorncs/sia-backed-http-clientBjørn Christian Seime2018-08-142-94/+146
|\ | | | | Bjorncs/sia backed http client
| * Misc improvements to close()Bjørn Christian Seime2018-08-141-0/+8
| | | | | | | | | | | | - Make close() idempotent - Disallow execute() after close() - Add redundant guards to refer()/release()
| * Fix race conditions by using the global lockBjørn Christian Seime2018-08-131-21/+17
| | | | | | | | | | Replace AtomicInteger with int and use clientLock to synchronize all access to refer() and release(). Remove synchronized from constructor.
| * Use SiaBackedApacheHttpClient in DefaultZtsClientBjørn Christian Seime2018-08-131-94/+25
| |
| * Add http client backed by Apache httpclient + ServiceIdentityProviderBjørn Christian Seime2018-08-131-0/+117
| |
* | Write identity document to temp file, then atomic moveBjørn Christian Seime2018-08-091-1/+6
|/
* Add getter for role token domainBjørn Christian Seime2018-08-081-1/+4
|
* Allow signed identity document without wrapped documentBjørn Christian Seime2018-08-071-1/+1
|
* Revert "Bjorncs/remove wrapped identity document"Morten Tokle2018-08-077-15/+349
|
* Merge pull request #6482 from ↵Bjørn Christian Seime2018-08-067-349/+15
|\ | | | | | | | | vespa-engine/bjorncs/remove-wrapped-identity-document Bjorncs/remove wrapped identity document
| * Remove 'dnsSuffix' and 'ztsEndpoint' from identity documentBjørn Christian Seime2018-07-264-36/+3
| |
| * Remove wrapped document structure from SignedIdentityDocumentBjørn Christian Seime2018-07-267-317/+16
| |
* | Add utility method to find all services from sia directoryBjørn Christian Seime2018-07-262-0/+64
|/
* Handle zms keys in addition to zts keysBjørn Christian Seime2018-07-254-23/+42
|
* Move NTokenValidator to vespa-athenz + load pub keys from fileBjørn Christian Seime2018-07-256-49/+232
| | | | | | | - Move NTokenValidator from controller-server to vespa-athenz - Remodel ZmsKeystore as AthenzTruststore - Use file-backed truststore on controller (replaces download of public keys) - Remove ZmsClient.getPublicKey/getPublicKeys
* Write private keys in PKCS#1Morten Tokle2018-07-252-3/+15
|
* Parse errors from ZTSBjørn Christian Seime2018-07-103-11/+45
|
* Revert "Move NTokenValidator to vespa-athenz + load pub keys from file"Harald Musum2018-07-096-232/+49
|
* Move NTokenValidator to vespa-athenz + load pub keys from fileBjørn Christian Seime2018-07-096-49/+232
| | | | | | | - Move NTokenValidator from controller-server to vespa-athenz - Remodel ZmsKeystore as AthenzTruststore - Use file-backed truststore on controller (replaces download of public keys) - Remove ZmsClient.getPublicKey/getPublicKeys
* Add getTenantDomains to vespa-athenz ZtsClientBjørn Christian Seime2018-07-053-0/+54
|
* Rename 'AccessCheckResult' -> 'AuthorizationResult'Bjørn Christian Seime2018-06-213-9/+9
|
* Add new Athenz security filter based on ZPEBjørn Christian Seime2018-06-201-0/+58
| | | | | - Allow flexible configuration of filter using a resource mapper - Add helper class to extract role and identity from role certificates
* Add roles to AthenzPrincipalBjørn Christian Seime2018-06-201-3/+19
|
* Remove unused classBjørn Christian Seime2018-06-201-27/+0
|
* Add wrapper for ZPEBjørn Christian Seime2018-06-205-0/+128
|
* Add data type for resource nameBjørn Christian Seime2018-06-202-0/+95
|
* Parse role token and add getter for identityBjørn Christian Seime2018-06-201-6/+24
|
* Add method to ZtsClient to retrieve identity certificateBjørn Christian Seime2018-06-1518-57/+323
|
* Specify scheme and port for configserver endpointBjørn Christian Seime2018-06-141-1/+1
|
* Cache tenant certificate and private key to diskBjørn Christian Seime2018-06-132-25/+71
|
* Add utility methods for reading/writing SIA credentialsBjørn Christian Seime2018-06-131-0/+73
|
* Remove support for ntokensBjørn Christian Seime2018-06-133-16/+9
|
* Remove deprecated ZtsClientBjørn Christian Seime2018-06-135-106/+71
| | | | | | | - Replace use of old ZtsClient with DefaultZtsClient - Add caching of role tokens - Add constructor to AthenzRole taking only strings - Change new ZtsClient interface to use AthenzRole for getRoleToken