Commit Graph

46 Commits

Author SHA1 Message Date
Tyler Treat
4c33177bd3 Bump up TLS timeout in test configs 2017-06-07 18:05:28 -05:00
Tyler Treat
d172ca5801 Add unit tests around TLS config reload 2017-06-07 16:34:39 -05:00
Tyler Treat
b70e2c2fc2 Implement config reload support for TLS
Allows reloading TLS config. This includes enabling/disabling TLS,
rotating keys/certs, enabling/disabling client verification, etc.
2017-06-07 12:25:56 -05:00
Tyler Treat
687a20be1c Implement config reload support for debug
Add config reload support for `debug` option.
2017-06-06 11:30:06 -05:00
Tyler Treat
43ee0ce6df Fix unit tests 2017-05-31 12:52:20 -05:00
Tyler Treat
b95dd5dfd0 Add tests around config reload 2017-05-30 21:09:35 -05:00
Ivan Kozlovic
3b6dc5eb2f Changed write_deadline configuration type
Changing from being the number of seconds to a time.Duration.
For backward compatibility, the configuration with the number
of seconds is still accepted but an error message is printed
asking the user to convert to duration.

Resolves #487
2017-05-06 14:20:01 -06:00
Derek Collison
0fa0003c9e Fixes for routes test with bcrypt and auth 2017-04-20 16:55:44 -07:00
Derek Collison
45d523e800 Fixups for auth always being checked now 2017-04-20 13:26:59 -07:00
Derek Collison
eae0834669 lower bcrypt costs for race tests, raise timeouts 2017-04-20 13:20:45 -07:00
Ivan Kozlovic
95d0152449 [ADDED] Make Write deadline configurable
We use a hardcoded value of 2 seconds for Write deadline when
writing data to client's socket.
This PR makes that value configurable.

Question is should we push the setting down to the client's object
to avoid indirection such as client.srv.opts.WriteDeadline?
2017-01-18 20:33:44 -07:00
Ivan Kozlovic
f1c513d7bf Removed last references to max_pending_size [ci skip] 2017-01-18 14:38:34 -07:00
Colin Sullivan
b133cda3cd Add curve preference option to configuration files.
* Add a preference to specify and order the curve preferences
* Add details tls help
* Deprecate old 1.4 cipher suite code
2016-12-27 15:41:48 -07:00
Ivan Kozlovic
d3555053d0 Change option/parameter name 2016-12-22 14:59:27 -07:00
Ivan Kozlovic
8e68e0cf80 Add code coverage for cluster's config file parameters 2016-12-20 19:04:59 -07:00
Volodymyr Khoroz
a98b51a5ca [#370] Ability to configure ping_interval and ping_max (with tests) 2016-11-16 00:31:38 +02:00
Derek Collison
449aa6e8ef Finalized opts parser for subject authorization 2016-06-16 13:49:26 -07:00
Derek Collison
46a9e6f0bc First pass at multi-user support 2016-05-13 12:27:57 -07:00
Derek Collison
4bbd2231a6 update server configs and README to new listen style 2016-05-12 17:34:14 -07:00
Derek Collison
2aba059523 Supporting test configs 2016-05-12 16:58:43 -07:00
Derek Collison
433d62ec0a Parse IPs and raw strings in arrays properly 2016-04-07 08:36:57 -07:00
Ivan Kozlovic
7c0a3b49a6 Fix cluster formation when servers connect quickly
Both seed and chained cases are now handled properly when servers
connect quickly and concurrently to one another.
When accepting a route, the server will forward the new route INFO
protocol to its known routes. In turn those routes will connect
to the new server (if not already connected).
A retry for implicit route was introduced to mitigate the issue
with two servers connecting to each other and electing the opposite
connection as the winner, resulting in both connections being dropped.
The server with smaller ID will try once to reconnect.
Some tests were fixed to handle possible extra INFO protocol.
New tests added.

Fix issue: https://github.com/nats-io/gnatsd/issues/206
2016-02-24 19:44:25 -07:00
Ivan Kozlovic
7becd0ceeb Fix ports for cluster bcrypt auth config files in server package
The ports were conflicting with the 'test' package when running
the test suite in parallel (go test -race -v ./...)
2016-02-23 21:32:48 -07:00
Derek Collison
7237972420 support for bcrypt in cluster auth 2016-02-23 12:47:46 -08:00
Ivan Kozlovic
9b25a379b8 Increase TLS timeout in config files
We would get failures on Travis, I would think because of small TLS timeout. Increase (or set) the TLS timeout to 2 seconds in most configuration files. Update tests that relied on the original value.
2015-12-08 15:20:20 -07:00
Ivan Kozlovic
1851ffa162 Temporary fix for Travis issues on new GCE 2015-12-07 18:22:53 -07:00
Derek Collison
b61da04ef7 Enable HTTPS for monitoring 2015-12-01 19:01:56 -08:00
Colin Sullivan
bb286ba424 Merge branch 'master' into tls_add_cipher 2015-11-23 10:55:43 -07:00
Colin Sullivan
790578f3f4 Add negative tests for cipher_suite configurations. 2015-11-22 17:21:22 -07:00
Derek Collison
3b64567f00 tls flags, proper timeouts 2015-11-22 14:43:16 -08:00
Colin Sullivan
936259e0d6 Removed the requirement for cipher_suites configuration in TLS and added default ciphers. 2015-11-21 21:15:35 -07:00
Colin Sullivan
0ff1b55fa9 Require cipher suites to be specified in the configuration.
* Configuration requires a cipher suite
* Removed default cipher suites
* Added help to assist with TLS configuration and list available cipher suites.
2015-11-20 16:00:25 -07:00
Derek Collison
ec258ac18d Moved certs and changed to simple hostname 2015-11-05 15:35:50 -08:00
Derek Collison
a579687e95 Removed old cert 2015-11-05 15:34:47 -08:00
Derek Collison
7b866f2215 Moving around keys and certs 2015-11-05 15:33:32 -08:00
Derek Collison
5004efe54b new files for TLS 2015-10-22 03:32:11 +02:00
Derek Collison
075529e2fe Properly handle and enforce max payload 2015-08-05 22:05:58 -07:00
Derek Collison
9d6b2f406a test tweaks for travis 2015-06-16 15:11:59 -07:00
Derek Collison
0a7de488bb Additional configs for route tests 2015-06-16 09:08:44 -07:00
Máximo Cuadros Ortiz
d99c6aeead remote syslog support 2014-10-16 00:45:44 +02:00
Eric Malm
89452213bf Make profiling port configurable via file
- Port can be specified with 'prof_port' value in file
- CLI flag overrides config file setting
2014-04-24 18:01:09 -07:00
Derek Collison
122f06816e spelling 2013-08-06 11:24:03 -07:00
Derek Collison
0b8718a67d flag/config parsing of log and pid files 2013-08-01 12:36:20 -07:00
Derek Collison
c07bca3144 Config file support for monitor http port 2013-07-30 18:04:33 -07:00
Derek Collison
ba13445bd7 Route config setup 2013-07-27 14:17:28 -07:00
Derek Collison
1bb5daca0b Test config file 2013-04-22 00:10:46 -04:00