Gyuho Lee
13715724b8
etcdmain: add "--cipher-suites" flag
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-06-05 18:50:15 -07:00
Gyuho Lee
6a3842776b
pkg/transport: add "TLSInfo.CipherSuites" field
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-06-05 18:10:35 -07:00
Gyuho Lee
641bddca0f
pkg/tlsutil: add "GetCipherSuite"
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-06-05 18:10:16 -07:00
rob boll
08dc184618
pkg/transport: don't set certificates on tls config
2018-04-17 06:17:38 -07:00
Gyuho Lee
3736a126df
pkg/proxy: move from "pkg/transport"
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-04-10 23:43:23 -07:00
Gyuho Lee
a4cbba89ff
pkg/transport: implement "Proxy"
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-02-06 10:02:34 -08:00
Gyuho Lee
0bc06d72df
pkg/transport: add "fixtures" for TLS tests
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-02-06 10:02:25 -08:00
Gyuho Lee
dbde4e986b
pkg/netutil: return error from "URLStringsEqual"
...
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-01-25 12:00:14 -08:00
Gyuho Lee
0ec5023b7b
pkg/expect: fix deadlock in mac OS
...
bufio.NewReader.ReadString blocks even
when the process received syscall.SIGKILL.
Remove ptyMu mutex and make ReadString return
when *os.File is closed.
Signed-off-by: Gyuho Lee <gyuhox@gmail.com>
2018-01-02 14:34:01 -08:00
Gyu-Ho Lee
962976f2df
pkg/fileutil: fix preallocate under OS X kernel
...
ftruncate changes st_blocks, and following fallocate
syscalls would return EINVAL when allocated block size
is already greater than requested block size
(e.g. st_blocks==8, requested blocks are 2).
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-12-14 10:36:57 -08:00
Gyu-Ho Lee
965d9806d5
pkg/flags: fix "SetFlagsFromEnv" error masking
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-11-27 06:41:43 -08:00
Gyu-Ho Lee
75110dd839
*: fix naked returns
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-11-10 18:46:15 -08:00
Joe Betz
a9996f8768
test: Deflake TestV3LeasePrmote integration test
2017-10-26 16:58:37 -07:00
Gyu-Ho Lee
1f2197b1f8
pkg/transport: add TODO to deprecate 'CAFile' field in v4
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-10-04 14:01:01 -07:00
Hitoshi Mitake
70018e9207
etcdmain, pkg: CN based auth for inter peer connection
...
This commit adds an authentication mechanism to inter peer connection
(rafthttp). If the cert based peer auth is enabled and a new option
`--peer-cert-allowed-cn` is passed, an etcd process denies a peer
connection whose CN doesn't match.
2017-10-02 15:59:17 +09:00
Anthony Romano
4fa1dd196c
*: make receiver names consistent
2017-09-12 03:54:04 -07:00
Gyu-Ho Lee
6e39a39e3a
Merge pull request #8511 from gyuho/ctx
...
*: deprecate 'golang.org/x/net/context'
2017-09-07 18:07:57 -07:00
Gyu-Ho Lee
f65aee0759
*: replace 'golang.org/x/net/context' with 'context'
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-09-07 13:39:42 -07:00
lorneli
63aa64d240
lease: use monotime in time.Time for Go 1.9
...
The golang/time package tracks monotonic time in each time.Time
returned by time.Now function for Go 1.9.
Use time.Time to measure whether a lease is expired and remove
previous pkg/monotime. Use zero time.Time to mean forever. No
expiration when expiry.IsZero() is true.
2017-09-07 14:18:19 +08:00
Anthony Romano
492bbc9659
netutil: test schemes for URLStringsEqual
...
add tests for http/https mismatch and unix scheme
2017-08-31 12:41:05 -07:00
Anthony Romano
7d4a8a6935
Merge pull request #8466 from heyitsanthony/tls-srv-mismatch
...
srv: if a host matches a peer, only use if url schemes match
2017-08-30 10:42:20 -07:00
Manjunath A Kumatagi
cd772ea737
pkg/pbutil: Fix go vet errors
2017-08-30 20:07:14 +05:30
Anthony Romano
a671703c08
srv: if a host matches a peer, only use if url schemes match
...
The https scheme for a peer advertise URL was ignored when resolving through
SRV records.
2017-08-29 23:29:56 -07:00
blueblue
9b92e1b2d0
flag: improve StringFlags by support set default value when init ( #8447 )
...
* flag: improve StringFlags by support set default value when init
when init flagSet, set default value should be moved to StringFlags init
func, which is more friendly
personal proposal
* flag: code improved for StringFlags
2017-08-28 00:02:11 -07:00
lorneli
54fcdb4b5c
pkg/wait: change list's lock to RWMutex
...
Change list's lock from Mutex to RWMutex, which allows concurrent
access for list.IsRegistered function.
2017-08-27 18:23:18 +08:00
Anthony Romano
67d932154c
testutil: don't panic on AssertNil on non-nil errors
2017-08-23 14:26:03 -07:00
Anthony Romano
6464574952
netutil: don't resolve unix socket URLs when comparing URLs
...
Was causing VerifyBootstrap() to hang on unix peers.
2017-08-17 19:58:24 -07:00
Gyu-Ho Lee
195744aea6
pkg/flags: warns on shadowed environment variable flags
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-08-09 15:58:48 -07:00
Anthony Romano
e9a7f3551b
Merge pull request #8281 from heyitsanthony/san-rdns
...
transport: use reverse lookup to match wildcard DNS SAN
2017-07-22 08:02:57 -07:00
Anthony Romano
b1aa962233
transport: use reverse lookup to match wildcard DNS SAN
...
Fixes #8268
2017-07-21 16:43:25 -07:00
Anthony Romano
426ad25924
transport: include InsecureSkipVerify in TLSInfo
...
Some functions take a TLSInfo to generate a tls.Config and there was no
way to force the InsecureSkipVerify flag.
2017-07-21 11:00:22 -07:00
Anthony Romano
bb42d2b40e
testutil: whitelist os.(*file).close
...
Leak detector is catching goroutines trying to close files which appear
runtime related:
1 instances of:
syscall.Syscall(...)
/usr/local/golang/1.8.3/go/src/syscall/asm_linux_386.s:20 +0x5
syscall.Close(...)
/usr/local/golang/1.8.3/go/src/syscall/zsyscall_linux_386.go:296 +0x3d
os.(*file).close(...)
/usr/local/golang/1.8.3/go/src/os/file_unix.go:140 +0x62
It's unlikely a user goroutine will leak on file close; whitelist it.
2017-07-19 13:28:15 -07:00
Anthony Romano
026e05518e
testutil: whitelist WaitGroup.Done
...
Calling a WaitGroup.Done() in a defer will sometimes trigger the leak
detector since the WaitGroup.Wait() will unblock before the defer
block completes. If the leak detector runs before the Done() is
rescheduled, it will spuriously report the finishing Done() as a leak.
This happens enough in CI to be irritating; whitelist it and ignore.
2017-07-12 14:04:24 -07:00
Anthony Romano
ab95eb0795
transport: accept connection if matched IP SAN but no DNS match
...
The IP SAN check would always do a DNS SAN check if DNS is given
and the connection's IP is verified. Instead, don't check DNS
entries if there's a matching iP.
Fixes #8206
2017-07-06 16:11:53 -07:00
Anthony Romano
5c7efaa288
adt: Union for interval trees
2017-06-21 14:33:15 -07:00
Anthony Romano
322976bedc
transport: CRL checking
2017-06-19 15:23:41 -07:00
Anthony Romano
a36d62a30c
Merge pull request #8049 from heyitsanthony/flock-base-test
...
fileutil: test some fallback functionality
2017-06-07 16:12:38 -07:00
Anthony Romano
c3fcf0f339
fileutil: test some fallback functionality
...
syscall.Flock fallback and preallocExtendTrunc
2017-06-07 11:22:40 -07:00
Anthony Romano
87a3c87e45
fileutil: return immediately if preallocating 0 bytes
...
fallocate will return EINVAL, causing zeroing to the end of a
0 byte file to fail.
Fixes #8045
2017-06-07 09:57:14 -07:00
Anthony Romano
88a3bb74b3
test, osutil: disable setting SIG_DFL on linux if built with cov tag
...
Was causing etcd to terminate before finishing writing its
coverage profile.
2017-06-05 21:09:35 -07:00
Gyu-Ho Lee
d690634bd6
*: remove unused, fix typos
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-05-18 12:11:18 -07:00
Anthony Romano
a6a1eb8378
Merge pull request #7949 from heyitsanthony/godocs
...
*: fill out missing package godocs
2017-05-18 10:23:26 -07:00
Anthony Romano
33c375dc44
*: fill out blank package godocs
...
Mostly one-liner short descriptions, but also includes some typo fixes
and some examples.
2017-05-18 09:41:13 -07:00
Anthony Romano
c09f0ca9d4
report: add NewWeightedReport
...
Reports with weighted results.
2017-05-17 16:07:20 -07:00
Gyu-Ho Lee
fba225cee5
pkg/osutil: fix missing 'syscall' import
...
Signed-off-by: Gyu-Ho Lee <gyuhox@gmail.com>
2017-05-15 14:11:54 -07:00
Anthony Romano
74fd7709ad
Merge pull request #7904 from heyitsanthony/osutil-exit
...
osutil: force SIG_DFL before resending terminating signal
2017-05-15 12:14:37 -07:00
Anthony Romano
6ce9aed8c5
Merge pull request #7881 from heyitsanthony/testctl-logging
...
e2e: more debugging output for lock and elect tests
2017-05-12 12:01:08 -07:00
Anthony Romano
7a1739a3e8
osutil: force SIG_DFL before resending terminating signal
...
The go runtime won't always reinstall the default signal handler on the
SIGTERM path, so it's possible the signal won't terminate the process.
Instead, force SIG_DFL for the signal.
2017-05-12 11:56:27 -07:00
Anthony Romano
90893735cf
Merge pull request #7917 from heyitsanthony/refactor-backend-paths
...
snap, etcdserver: tighten up snapshot path handling
2017-05-12 09:33:37 -07:00
Anthony Romano
71d7c85b6b
expect: reload DEBUG_EXPECT for each process
...
Lets e2e test cases selectively turn on expect debugging to get
full application output written to stdout.
2017-05-11 16:09:31 -07:00