Skip to content

tls: make server options available to the handshaker factory#18379

Merged
lizan merged 7 commits intoenvoyproxy:mainfrom
akonradi:handshaker-options
Oct 11, 2021
Merged

tls: make server options available to the handshaker factory#18379
lizan merged 7 commits intoenvoyproxy:mainfrom
akonradi:handshaker-options

Conversation

@akonradi
Copy link
Copy Markdown
Contributor

@akonradi akonradi commented Oct 1, 2021

Commit Message: Make Server::Options available to the SSL handshaker factory
Additional Description:
This allows the handshaker to detect the run mode (Server::Options::mode) and use that
to bypass checks required for serving but not for validation.

Risk Level: low
Testing: added and ran unit tests
Docs Changes: n/a
Release Notes: n/a
Platform Specific Features: n/a

Use `using` declarations where appropriate, fix local variable naming,
use a named constant for the shared magic string.

Signed-off-by: Alex Konradi <akonradi@google.com>
This allows the handshaker to detect the run mode
(Server::Options::mode) and use that to bypass checks required for
serving but not for validation.

Signed-off-by: Alex Konradi <akonradi@google.com>
Test that the HandshakerFactoryContext created by the TLS transport
socket impl passes through options from the parent transport socket
factory context.

Signed-off-by: Alex Konradi <akonradi@google.com>
@akonradi
Copy link
Copy Markdown
Contributor Author

akonradi commented Oct 1, 2021

/cc @ambuc

Signed-off-by: Alex Konradi <akonradi@google.com>
Signed-off-by: Alex Konradi <akonradi@google.com>
Signed-off-by: Alex Konradi <akonradi@google.com>
@akonradi
Copy link
Copy Markdown
Contributor Author

akonradi commented Oct 7, 2021

/retest

@repokitteh-read-only
Copy link
Copy Markdown

Retrying Azure Pipelines:
Check envoy-presubmit didn't fail.

🐱

Caused by: a #18379 (comment) was created by @akonradi.

see: more, trace.

Signed-off-by: Alex Konradi <akonradi@google.com>
@akonradi
Copy link
Copy Markdown
Contributor Author

akonradi commented Oct 7, 2021

/retest

@repokitteh-read-only
Copy link
Copy Markdown

Retrying Azure Pipelines:
Retried failed jobs in: envoy-presubmit

🐱

Caused by: a #18379 (comment) was created by @akonradi.

see: more, trace.

@akonradi
Copy link
Copy Markdown
Contributor Author

akonradi commented Oct 7, 2021

@lizan sorry about the noise, looks like CI was having trouble downloading dependencies. Anyway this should be ready for review now.

@lizan lizan merged commit 8d33116 into envoyproxy:main Oct 11, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants