Files
Andrew MartinezandGitHub 0e61edb2f9 fix #2984 identity/router enrollment do not return full chains (#2990)
* fix #2984 identity/router enrollment do not return full chains

- router extend via REST/ctrl now return full chains
- identity extend via REST now return full chains
- updates tests to allow for chain lengths
- modifies verification to look at the first cert in the chain (leaf)
- modifies edge routers to not start extension if new certs can't be
  saved
- adds network-jwt tests
2025-04-11 11:27:57 -04:00

50 lines
1.2 KiB
YAML

v: 3
identity:
cert: etc/ca/intermediate/certs/002-client.cert.pem
server_cert: etc/ca/intermediate/certs/002-server.cert.pem
key: etc/ca/intermediate/private/002.key.pem
ca: etc/ca/intermediate/certs/ca-chain.cert.pem
#trace:
# path: 002.trace
ctrl:
endpoint: tls:127.0.0.1:6262
csr:
country: US
province: NC
locality: Charlotte
organization: NetFoundry
organizationalUnit: Ziti
sans:
dns:
- "localhost"
ip:
- "127.0.0.1"
/
link:
listeners:
- binding: transport
bind: tls:127.0.0.1:6002
advertise: tls:127.0.0.1:6002
#bind: transwarptls:127.0.0.1:6002
#advertise: transwarptls:127.0.0.1:6002
options:
outQueueSize: 16
dialers:
- binding: transport
options:
outQueueSize: 32
transport:
westworld3:
profile_version: 1
#tx_portal_min_sz: 16384
#tx_portal_max_sz: 1073741824
#instrument:
# name: metrics
# path: /tmp/westworld3
# snapshot_ms: 250
# enabled: true