Anthony Romano ab95eb0795 transport: accept connection if matched IP SAN but no DNS match ...

The IP SAN check would always do a DNS SAN check if DNS is given
and the connection's IP is verified. Instead, don't check DNS
entries if there's a matching iP.

Fixes #8206

2017-07-06 16:11:53 -07:00

..

doc.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

keepalive_listener_test.go

transport: use actual certs for listener tests

2017-04-12 13:41:33 -07:00

keepalive_listener.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

limit_listen.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

listener_test.go

Merge pull request #7687 from heyitsanthony/deny-tls-ipsan

2017-04-13 15:03:25 -07:00

listener_tls.go

transport: accept connection if matched IP SAN but no DNS match

2017-07-06 16:11:53 -07:00

listener.go

transport: CRL checking

2017-06-19 15:23:41 -07:00

timeout_conn.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

timeout_dialer_test.go

pkg/transport: bump wait time in TestReadWriteTimeoutDialer for write deadline

2016-08-22 15:30:44 -07:00

timeout_dialer.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

timeout_listener_test.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

timeout_listener.go

*: deny incoming peer certs with wrong IP SAN

2017-04-12 13:41:33 -07:00

timeout_transport_test.go

pkg: update LICENSE header

2016-05-12 20:48:53 -07:00

timeout_transport.go

pkg/transport: fix minor typo

2016-08-04 16:00:18 -07:00

tls.go

transport: add ServerName to TLSConfig and add ValidateSecureEndpoints

2016-08-03 22:28:03 -07:00

transport.go

pkg/transport: update scheme to unix copying URL

2016-08-03 10:35:28 -07:00

unix_listener.go

*: fix a bug in handling unix socket urls

2017-04-05 14:33:13 +08:00