Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add TlsClientInitializer. #73

Merged
merged 1 commit into from
Feb 5, 2016
Merged

Add TlsClientInitializer. #73

merged 1 commit into from
Feb 5, 2016

Conversation

adleong
Copy link
Member

@adleong adleong commented Feb 4, 2016

Fixes #63

A TlsClientInitializer will read configuration from the tls key in the router
config and provide a TlsClientPrep module which is used to configure TLS in
the client. Two TlsClientInitializers are provided: NoValidationTlsClient
which skips hostname validation and StaticTlsClient which uses a fixed
hostname and optional CA cert for all clients.

@adleong
Copy link
Member Author

adleong commented Feb 4, 2016

TODO:

  • fix tests
  • scaladoc all the things

* are sent. Note that while several TlsClientInitializer modules can be loaded, each router can only use at most
* one of them.
*/
trait TlsClientInitializers {
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How about calling this file / trait / object TlsInitializers? That's my preference since it corresponds to the tls block from the config file.

Also, side note, mind wrapping all of your scaladoc comments at 80 chars?

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's important to distinguish client tls from server tls...

I don't think the config should refer to clientTls since it's already set on the router and not the server...

I'm not saying this shouldn't be renamed, but I think we should be sensitive to distinguish client and server functionality in the naming

@olix0r
Copy link
Member

olix0r commented Feb 4, 2016

Excellent work, @adleong. This looks great. A minor quibble abut naming i'd like to resolve, but modulo that: ⭐

@olix0r
Copy link
Member

olix0r commented Feb 4, 2016

rebase, write a nice description, and good to go ;)

A TlsClientInitializer will read configuration from the tls key in the router
config and provide a TlsClientPrep module which is used to configure TLS in
the client.  Two TlsClientInitializers are provided: noValidation
which skips hostname validation and static which uses a fixed
hostname and optional CA cert for all clients.
@olix0r
Copy link
Member

olix0r commented Feb 4, 2016

my name is oliver and i endorse this branch 👍

@klingerf klingerf added this to the 0.0.10 milestone Feb 5, 2016
@klingerf
Copy link
Member

klingerf commented Feb 5, 2016

Looks good! And thanks for the scaladocs updates. ⭐ 🍵

adleong added a commit that referenced this pull request Feb 5, 2016
@adleong adleong merged commit 129395e into master Feb 5, 2016
@adleong adleong deleted the alex/tls-config branch February 5, 2016 00:17
@adleong adleong removed the reviewable label Feb 5, 2016
Tim-Brooks pushed a commit to Tim-Brooks/linkerd that referenced this pull request Dec 20, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Router TLS configuration
3 participants