envoyproxy / envoy

Cloud-native high-performance edge/middle/service proxy
https://www.envoyproxy.io
Apache License 2.0
24.78k stars 4.76k forks source link

Support loading TLS certificates in DER format. #5713

Open PiotrSikora opened 5 years ago

PiotrSikora commented 5 years ago

Currently supported PEM format is base64-encoded DER-encoded certificate with some extra prettifiers.

Supporting DER format would allow passing ~30% smaller certificates and private keys over xDS (compared to currently supported PEM format) and avoid base64-decoding in Envoy.

The idea is to support both formats, not replace PEM with DER.

stale[bot] commented 5 years ago

This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in the next 7 days unless it is tagged "help wanted" or other activity occurs. Thank you for your contributions.

PiotrSikora commented 5 years ago

Not stale, still an issue.

stale[bot] commented 5 years ago

This issue has been automatically marked as stale because it has not had activity in the last 30 days. It will be closed in the next 7 days unless it is tagged "help wanted" or other activity occurs. Thank you for your contributions.

stale[bot] commented 5 years ago

This issue has been automatically closed because it has not had activity in the last 37 days. If this issue is still valid, please ping a maintainer and ask them to label it as "help wanted". Thank you for your contributions.