ae-govau

Leaf certificate expiration reported by API does not account for CA expiration date

4

_What version of the credhub server you are using?_ 2.12.8 _What version of the credhub cli you are using?_ 2.6.2 _If you were attempting to accomplish a task, what was...

Pin notAfter dates for certificates to max out at signing CA notAfter date

4

This prevents one from issuing a certificate that appears to be valid, but in reality typically won't validate as being so. Partially fixes #377

Enhancement: option to send HTTP over unix socket

2

What does this PR change? What problem does it solve? ----------------------------------------------------- Add one method to send HTTP traffic (for any backend) over a unix socket. I'm not sure this is...

regression: unable to handle detect errors related to messages being too large

9

(creating issue from comments I made on #2628 a number weeks ago) The recent change to error handling in #2628 broke some of our running code. We had code that...

## Issue When looking into why some backups were running slowly we noted that our CF blobstore (using `singleton-blobstore`) has an extraordinary amount of empty directories. ``` find /var/vcap/store/shared -empty...

Commas seem optional in flow sequences - is this intended?

2

We noticed that: ```java new YamlReader("['a'b]").read(); ``` would parse without error, returning a list with 2 strings, `"a"` and `"b"`. Other parsers (pyyaml, SnakeYAML) fail on parsing this, due to...

fix: return ErrMessageSizeTooLarge when message is too large

5

For most of this library's existence it has returned ErrMessageSizeTooLarge when the message exceeded the configured size. For a short period in 2019 this error was renamed (#1218) but shortly...

fix: allow skipping per message size check

3

This is useful when producer compression is enabled, as it allows for much larger messages to be sent to the broker (providing the entire batch they are in stays small...

Should `DNSLookupKDC` default to `true` to match `man krb5.conf` ?

2

`man krb5.conf` (https://linux.die.net/man/5/krb5.conf) states: > dns_lookup_kdc > Indicate whether DNS SRV records should be used to locate the KDCs and other servers for a realm, if they are not listed...