search

kumahq / kuma-website

🐻 The official website for Kuma, the control plane for modern service connectivity.
https://kuma.io
Apache License 2.0
104 stars 87 forks source link

Clarify cert verification for External Service TLS #1205

Open slonka opened 1 year ago

slonka commented 1 year ago

Description

We should backfill https://github.com/slonka/external-service-with-own-cert (that I created to try to reproduce an issue reported on slack) as an E2E test in Kuma.

jakubdyszkiewicz commented 1 year ago

Triage: Is it not covered by It("should route to external-service over tls", ?

slonka commented 1 year ago

I think curl will use Common Name if SAN DNS is not available and we will reject that, so maybe we don't need to backfill an e2e test but update the docs.

jakubdyszkiewicz commented 1 year ago

Triage: clarify in docs that we Kuma only uses SAN to verify certs and curl fallbacks to CN

github-actions[bot] commented 1 year ago

This issue was inactive for 90 days. It will be reviewed in the next triage meeting and might be closed. If you think this issue is still relevant, please comment on it or attend the next triage meeting.

github-actions[bot] commented 1 year ago

This issue was inactive for 90 days. It will be reviewed in the next triage meeting and might be closed. If you think this issue is still relevant, please comment on it or attend the next triage meeting.

github-actions[bot] commented 10 months ago

This issue was inactive for 90 days. It will be reviewed in the next triage meeting and might be closed. If you think this issue is still relevant, please comment on it or attend the next triage meeting.

github-actions[bot] commented 7 months ago

This issue was inactive for 90 days. It will be reviewed in the next triage meeting and might be closed. If you think this issue is still relevant, please comment on it or attend the next triage meeting.

github-actions[bot] commented 4 months ago

This issue was inactive for 90 days. It will be reviewed in the next triage meeting and might be closed. If you think this issue is still relevant, please comment on it or attend the next triage meeting.

github-actions[bot] commented 4 weeks ago

This issue was inactive for 90 days. It will be reviewed in the next triage meeting and might be closed. If you think this issue is still relevant, please comment on it or attend the next triage meeting.