24 Commits

Author	SHA1	Message	Date
Jeff Mitchell	6faf8365e9	Add option to disable client certificate requesting. (#3373) ... Fixes #3372	2017-09-25 14:41:46 -04:00
Doyoon Kim	f855da7a89	Moved PROXY protocol wrap to execute before the TLS wrap (#3195)	2017-08-23 12:00:09 -04:00
Gobin Sougrakpam	f166016ae8	tls_client_ca_file option for verifying client (#3034)	2017-08-03 07:33:06 -04:00
Jeff Mitchell	c6615e1b51	Add a -dev-three-node option for devs. (#3081)	2017-07-31 11:28:06 -04:00
Jeff Mitchell	22e06c05e8	Convert listener arguments to map[string]interface{} (#2905) ... This allows people to use more natural constructs, e.g. for tls_disable it can be a bool, int, or string.	2017-06-22 20:29:53 +01:00
Jeff Mitchell	317c664370	Add option to require valid client certificates (#2457)	2017-03-08 10:21:31 -05:00
Roman Vynar	51bb8bc544	Added tls_cipher_suites, tls_prefer_server_ciphers config options to listener (#2293)	2017-01-23 13:48:35 -05:00
Jeff Mitchell	ad62b32ff0	Rejig where the reload functions live	2016-09-30 00:07:22 -04:00
Jeff Mitchell	fda9473681	Trim leading/trailing space around PEM bundles. ... Fixes #1634	2016-07-20 13:57:49 -04:00
vishalnayak	ee6ba1e85e	Make 'tls_min_version' configurable	2016-07-12 19:32:47 -04:00
Jeff Mitchell	d32283ba49	Initial Atlas listener implementation	2016-06-02 14:05:47 -04:00
Jeff Mitchell	14f538556e	Don't generate an ID; use address for the ID. Generally speaking we'll need to sane against what's in the config	2016-03-11 17:28:03 -05:00
Jeff Mitchell	ca40e06f5d	Don't inline factory	2016-03-11 17:02:44 -05:00
Jeff Mitchell	9f2f5b1c61	Retool to have reloading logic run in command/server	2016-03-11 16:47:03 -05:00
Jeff Mitchell	7e52796aae	Add reload capability for Vault listener certs. No tests (other than ... manual) yet, and no documentation yet.	2016-03-11 14:05:52 -05:00
Armon Dadgar	5c085d3718	server: sanity check value for 'tls_disable'	2015-11-25 11:37:57 -08:00
Armon Dadgar	676f6d4233	server: import sha512. Fixes #448	2015-07-23 13:51:45 -07:00
Karl Gutwin	04c5596822	Avoid unnecessary abbreviation	2015-07-22 23:28:46 -04:00
Karl Gutwin	3ed4f2f9e1	Allow specifying a TLS minimum version	2015-07-22 23:19:41 -04:00
Armon Dadgar	61f2e86f4e	command/listener: Request TLS client cert. Fixes #214	2015-05-20 16:01:40 -07:00
Armon Dadgar	723860fa96	command: Set minimum TLS version to 1.2	2015-04-13 19:09:44 -07:00
Mitchell Hashimoto	a196d194a1	command/server: cleaner output	2015-04-04 12:06:41 -07:00
Mitchell Hashimoto	9564f8bcc2	command/server: support TLS	2015-03-13 12:53:08 -07:00
Mitchell Hashimoto	69d28396ca	command/server: tcp listener	2015-03-13 12:53:08 -07:00