TheArchive/tailscale
1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2025-08-21 18:42:36 +00:00
Code Issues Packages Projects Releases Wiki Activity

prober: expand certificate verification logic in the TLS prober

Browse Source 
TLS prober now checks validity period for all server certificates
and verifies OCSP revocation status for the leaf cert.

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
This commit is contained in:
Anton Tolchanov
2022-10-12 18:41:38 +01:00
committed by Anton Tolchanov
parent 39d03b6b63
commit 26af329fde
4 changed files with 351 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
prober/http.go
View File

@@ -18,8 +18,7 @@ const maxHTTPBody = 4 << 20 // MiB
//
// The ProbeFunc sends a GET request for url, expects an HTTP 200
// response, and verifies that want is present in the response
// body. If the URL is HTTPS, the probe further checks that the TLS
// certificate is good for at least the next 7 days.
// body.
func HTTP(url, wantText string) ProbeFunc {
return func(ctx context.Context) error {
return probeHTTP(ctx, url, []byte(wantText))