Zhefeng C.

icon location Shanghai, China

Results 21 comments of Zhefeng C.

fix(cmd): `kong vault get` doesn't work in dbless mode

@bungle The tricky part of this problem is that we don't really know what directives to inject before getting the kong conf by calling `conf_loader`. So we need to run...

fix(cmd): `kong vault get` doesn't work in dbless mode

Updated this PR to make it more generic. The basic idea keeps the same, but the main processing logic is moved from `kong/cmd/vault.lua` forward to `kong/cmd/init.lua` so that other commands...

fix(cmd): `kong vault get` doesn't work in dbless mode

Because of the reason mentioned above, I don't think statically adding directives into resty_cli will work. The config can be specified by env or custom config file or inherit from...

fix poolname to include the digest of the cert for mTLS

Hi @pintsized could you review and merge this when you have time?

fix poolname to include the digest of the cert for mTLS

ping this

fix poolname to include the digest of the cert for mTLS

ping @pintsized This one has been open for a long time. Could you have a look?

fix poolname to include the digest of the cert for mTLS

> I notice that there is some code (https://github.com/ledgetech/lua-resty-http/pull/307/files#diff-a717dcbee90c573feec0be98675c64ff06bf5bb3d8bb3d30b66b131952e22a3cR169), it return three values, but the client only uses two (ok, err), is it a bug? should we fix it? Yeah,...

fix poolname to include the digest of the cert for mTLS

@pintsized Could you bump a new version? Appreciate it.

Unable to send crafted dangerous certificate in a request

Maybe your should change the source code, or use debugger to substitute the cert content just before sending the CERTIFICATE message.

ec.key doesn't correspond to cert.der{,.old}

> I was hoping to probe a vulnerable system with a command like this: > > ``` > $ < /dev/null openssl s_client -cert cert.der.old -certform DER -key ec.key -keyform...