mirror of
https://github.com/gravitational/teleport.git
synced 2026-09-21 14:35:22 +08:00
cf2c7059a3
* Add full IP pinning enforcement We're adding IP pinning check to `authorizer.Authorize` which is used for every call, so now all communications with teleport should enforce IP pinning. Also making sure we always provide login IP for user certificate creation and correct client IP propagation everywhere. * Add integration test for App IP pinning. * Fix wording Co-authored-by: Tiago Silva <tiago.silva@goteleport.com> * Wrap error Co-authored-by: Tiago Silva <tiago.silva@goteleport.com> * Add godocs * Clone TLS config * Improve proxyHeaderSigner usage * Wider use proxyHeaderDialer and remove adhoc writing of singed header * Add helper function TLSDial * Use proxyHeader dialer in authConnect * Simplify tlsConfig manipulation Co-authored-by: Przemko Robakowski <przemko.robakowski@goteleport.com> * Remove redundant channels processing in TLSDial * Reduce nesting * Update generated protobufs * Remove ignoring of bad IP on signed PROXY header generation * Provide logger to CheckIPPinning function --------- Co-authored-by: Tiago Silva <tiago.silva@goteleport.com> Co-authored-by: Przemko Robakowski <przemko.robakowski@goteleport.com>
This package is documented using a combination of pkg.go.dev and Teleport Docs.