-
-
Notifications
You must be signed in to change notification settings - Fork 1.6k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add MTLS Support #657
Add MTLS Support #657
Commits on Sep 11, 2018
-
* Add an optional configuration for Rocket.toml, ca_certs, to take in a directory and use it for MTLS. * Update Cargo.toml to point to fork of hyper-sync-rustls with updates for MTLS.
Configuration menu - View commit details
-
Copy full SHA for 25b3ff4 - Browse repository at this point
Copy the full SHA 25b3ff4View commit details -
Make TLS peer certificates available to Request
* Save peer certificates from network stream to Data * Add peer_certs field to Request * Move certificates from Data to Request
Configuration menu - View commit details
-
Copy full SHA for bff3e2d - Browse repository at this point
Copy the full SHA bff3e2dView commit details -
Configuration menu - View commit details
-
Copy full SHA for 0f917fe - Browse repository at this point
Copy the full SHA 0f917feView commit details -
Add client certificate verification.
* Lookup domain name associated with client's IP Address. * Verify that the domain name match the certificate common name.
Configuration menu - View commit details
-
Copy full SHA for 9a704fd - Browse repository at this point
Copy the full SHA 9a704fdView commit details -
* Clean up code. * Added better comments.
Configuration menu - View commit details
-
Copy full SHA for 4026e37 - Browse repository at this point
Copy the full SHA 4026e37View commit details -
Make MTLS certificate store path optional.
* Make cert_store_path optional. * Modify code sample to reflect changes.
Configuration menu - View commit details
-
Copy full SHA for 2c51d66 - Browse repository at this point
Copy the full SHA 2c51d66View commit details -
Configuration menu - View commit details
-
Copy full SHA for 33daf7a - Browse repository at this point
Copy the full SHA 33daf7aView commit details -
Consolidate TLS and MTLS and add retrievable certificate information.
* Move mtls.rs contents into tls.rs. * Parse certificat into MutualTlsUser. * Create getter methods for MutualTlsUser. * Generate MutualTlsUser from first accepted certificate from array the client provides.
Configuration menu - View commit details
-
Copy full SHA for 5d46b2e - Browse repository at this point
Copy the full SHA 5d46b2eView commit details -
Configuration menu - View commit details
-
Copy full SHA for 24ab52e - Browse repository at this point
Copy the full SHA 24ab52eView commit details -
Make MutualTlsUser more robust.
* Add more comments explaining sections of code. * Add documentation and examples. * Remove public key and signature from MutualTlsUser. * Improve error handling to not panic when generating a new MutualTlsUser. * Replace unwraps with exceptions to specify what failed.
Configuration menu - View commit details
-
Copy full SHA for 03f2c0d - Browse repository at this point
Copy the full SHA 03f2c0dView commit details -
Configuration menu - View commit details
-
Copy full SHA for 0486d18 - Browse repository at this point
Copy the full SHA 0486d18View commit details -
Configuration menu - View commit details
-
Copy full SHA for 513003a - Browse repository at this point
Copy the full SHA 513003aView commit details -
Configuration menu - View commit details
-
Copy full SHA for 8a4d519 - Browse repository at this point
Copy the full SHA 8a4d519View commit details -
* Combine lines of code that can be together and simplify get_not_before and get_not_after method names. * Remove methods referenced in comments that are no longer implemented.
Configuration menu - View commit details
-
Copy full SHA for fd676c8 - Browse repository at this point
Copy the full SHA fd676c8View commit details -
Configuration menu - View commit details
-
Copy full SHA for 4dd1d3a - Browse repository at this point
Copy the full SHA 4dd1d3aView commit details -
Configuration menu - View commit details
-
Copy full SHA for 62842bd - Browse repository at this point
Copy the full SHA 62842bdView commit details -
Configuration menu - View commit details
-
Copy full SHA for bd8cdfb - Browse repository at this point
Copy the full SHA bd8cdfbView commit details -
* Use combinators instead of explicit matches where possible * Remove some clone() calls * Return references instead of copies
Configuration menu - View commit details
-
Copy full SHA for 82fd1a9 - Browse repository at this point
Copy the full SHA 82fd1a9View commit details -
Configuration menu - View commit details
-
Copy full SHA for c381395 - Browse repository at this point
Copy the full SHA c381395View commit details -
Move name validation logic into
tls
This keeps the internals of the name validation out of the `from_request` logic for `MutualTlsUser`, which is currently still in the core rocket lib to avoid circular dependencies.
Configuration menu - View commit details
-
Copy full SHA for 7e3c30f - Browse repository at this point
Copy the full SHA 7e3c30fView commit details -
Remove certificate parsing from MutualTlsUser
Even without exposing the certificate details, MutualTlsUser provides a guard that only allows authenticated clients to connect. Removing the certificate parsing will allow this functionality to be added before all the details of parsing the certificates have been figured out. * Remove all fields and methods from MutualTlsUser * Remove openssl dependency * Update tests
Configuration menu - View commit details
-
Copy full SHA for aade841 - Browse repository at this point
Copy the full SHA aade841View commit details -
Expose subject name for
MutualTlsUser
This is not necessarily the value stored in the subject name of the certificate, but it is the name for which the provided certifcate was validated.
Configuration menu - View commit details
-
Copy full SHA for 8ca69ce - Browse repository at this point
Copy the full SHA 8ca69ceView commit details
Commits on Mar 11, 2019
-
Configuration menu - View commit details
-
Copy full SHA for 931bc52 - Browse repository at this point
Copy the full SHA 931bc52View commit details -
Configuration menu - View commit details
-
Copy full SHA for 7071a7c - Browse repository at this point
Copy the full SHA 7071a7cView commit details