Thomas Calderon

Project status update

1

Hello, Thanks for the good work so far. Is this possible to provide an update on the status of certstream and the wider project? Is this still maintained? Thanks, Thomas

Upgrade to newer Rust?

5

Hi there, I have been trying to use this PoC code to generate some functioning code but since the blog post was written in 2017 most of the Rust ecosystem...

Add more capabilities to certificate-matcher for mTLS routes

1

**Is your feature request related to a problem? Please describe.** Currently the Certificate Matcher that can be configured in a route when using mTLS only offers the following capabilities: -...

downstream_mtls.match_subject_alt_names does not work on "policy" enforcement.

1

## What happened? When configuring a Pomerium instance with mTLS enabled and setting the enforcement mode to "policy" the SAN matching does not happen and allows valid certificate missing the...

ACME/Autocert setup is greedy/clunky when using split mode

2

## What happened? When using the split-service model, individual components should only request certificates when required. Instead, each instance (authenticate, proxy for example) will both attempt to retrieve certificates for...

**Is your feature request related to a problem? Please describe.** Pomerium only offers the ability to perform programmatic access using the callback flow. For instance, a localhost listener is started...

Enable OSX compilation in CI

7

The Github Workflow does not run a cross compile for the darwin target. If darwin cross compilation is to be reliable, the CI should include it so we know that...

**Describe the bug** When a client sends a large enough HTTP header the echoserver will not process the request and return a `431` status. By default the node version used...