John Howard
John Howard
It looks like this is an upstream Envoy bug fixed in https://github.com/envoyproxy/envoy/pull/34461. When that lands Istio will automatically pick it up in its next version.
Looks like the upstream PR is making progress but is still pending
Nice. Yep we have a cronjob to sync yo to the latest so this would land in 1.24 unless they backport it to envoy 1.31
cc @keithmattix @whitneygriffith
The info is already in cluster metadata, so we just need to do the fallback
@inikulin we have moved off using hyper-boring so its not a high priority for me; if anyone is interested feel free to take over this PR/make a new one based...
Any alternative (or addition, I suppose) to hyper 1.0 support could be https://github.com/cloudflare/boring/issues/165, which lets the rest of the rustls ecosystem handle things like tokio, hyper, etc integration
FYI This was reverted in https://github.com/golang/go/issues/65321
The CMVP is ready now: https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/4735
This is still an issue