Tony Grosinger 4e21f87e3d pkg/transport: reload TLS certificates for every client requests ...

This changes the baseConfig used when creating tls Configs to utilize
the GetCertificate and GetClientCertificate functions to always reload
the certificates from disk whenever they are needed.

Always reloading the certificates allows changing the certificates via
an external process without interrupting etcd.

Fixes #7576

Cherry-picked by Gyu-Ho Lee <gyuhox@gmail.com>
Original commit can be found at https://github.com/coreos/etcd/pull/7784

2017-04-27 11:22:03 -07:00

..

doc.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

keepalive_listener_test.go

transport: use actual certs for listener tests

2017-04-12 13:41:33 -07:00

keepalive_listener.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

limit_listen.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

listener_test.go

Merge pull request #7687 from heyitsanthony/deny-tls-ipsan

2017-04-13 15:03:25 -07:00

listener_tls.go

transport: resolve DNSNames when SAN checking

2017-04-18 13:21:26 -07:00

listener.go

pkg/transport: reload TLS certificates for every client requests

2017-04-27 11:22:03 -07:00

timeout_conn.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

timeout_dialer_test.go

pkg/transport: bump wait time in TestReadWriteTimeoutDialer for write deadline

2016-08-22 15:30:44 -07:00

timeout_dialer.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

timeout_listener_test.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

timeout_listener.go

*: deny incoming peer certs with wrong IP SAN

2017-04-12 13:41:33 -07:00

timeout_transport_test.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

timeout_transport.go

pkg/transport: fix minor typo

2016-08-04 16:00:18 -07:00

tls.go

transport: add ServerName to TLSConfig and add ValidateSecureEndpoints

2016-08-03 22:28:03 -07:00

transport.go

pkg/transport: update scheme to unix copying URL

2016-08-03 10:35:28 -07:00

unix_listener.go

*: fix a bug in handling unix socket urls

2017-04-05 14:33:13 +08:00