go.fuhry.dev Git - runtime.git/commit

]> go.fuhry.dev Git - runtime.git/commit

author	Dan Fuhry <dan@fuhry.com>
	Thu, 23 Jul 2026 03:25:49 +0000 (23:25 -0400)
committer	Dan Fuhry <dan@fuhry.com>
	Thu, 23 Jul 2026 03:25:49 +0000 (23:25 -0400)
commit	40882c62c9d67f56882ecdef29d6b5e4ed406454
tree	a5561d9992239c481eeb0694c407f62e07cac447	tree \| snapshot (tar.gz zip)
parent	82921462e1790ec2c4f97dfbddf0f6ebcea529e0	commit \| diff

[mtls][mint] tag mint-issued certs with requester identity

- Add a way to tack arbitrary structured protobuf on to certificates using a `repeated google.protobuf.Any`
- Add `fuhry.runtime.service.mint.CertificateRequester` message to represent requester identity
- Block RequestCertificate calls if caller is using a cert that came from mint

mint/BUILD.bazel		diff \| blob \| history
mint/client.go		diff \| blob \| history
mint/internal/BUILD.bazel	[new file with mode: 0644]	blob
mint/internal/requester.go	[new file with mode: 0644]	blob
mint/servicer/BUILD.bazel		diff \| blob \| history
mint/servicer/servicer.go		diff \| blob \| history
mint/servicer/signer.go		diff \| blob \| history
mtls/identity.go		diff \| blob \| history
proto/mtls/BUILD.bazel	[new file with mode: 0644]	blob
proto/mtls/attributes.proto	[new file with mode: 0644]	blob
proto/service/mint/mint_types.proto		diff \| blob \| history

RSS Atom