worker

Mar 7, 2024 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Dec 12, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Oct 31, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Oct 17, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Oct 6, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Jul 14, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Jun 9, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

type TestWorkerOpts

+ DownstreamWorkerAuthKms *multi.PooledWrapper

+ EnableAuditEvents bool

+ EnableErrorEvents bool

+ EnableObservationEvents bool

+ EnableSysEvents bool

+ UseDeprecatedKmsAuthMethod bool

+ WorkerAuthDebuggingEnabled *atomic.Bool

+ WorkerRecordingStoragePath string

type Worker

+ AuthRotationNextRotation atomic.Pointer[time.Time]

+ RecordingStorage storage.RecordingStorage

+ func (w *Worker) SendUpstreamMessage(ctx context.Context, m proto.Message) (proto.Message, error)

Apr 4, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Mar 9, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Feb 8, 2023 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

+ var GetProtocolContext = nilProtocolContext

+ var HandleHcpbClusterId func(s string) string

type TestWorker

+ func NewAuthorizedPkiTestWorker(t *testing.T, repo *server.Repository, name string, upstreams []string) (*TestWorker, string)

Dec 8, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Nov 23, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

+ func NewTestMultihopWorkers(t testing.TB, logger hclog.Logger, controllerContext context.Context, ...) (kmsWorker *TestWorker, pkiWorker *TestWorker, childPkiWorker *TestWorker)

type TestWorkerOpts

+ SuccessfulStatusGracePeriodDuration time.Duration

Sep 27, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

type Worker

+ func (w *Worker) GetHealthHandler() (http.Handler, error)

+ func (w *Worker) GracefulShutdown() error

+ func (w *Worker) HealthInformation() *pbhealth.HealthInfo

Sep 14, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Sep 12, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

+ const UnknownReceiverType

type Worker

+ func (w *Worker) Reload(ctx context.Context, newConf *config.Config)

Aug 30, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Aug 22, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Aug 11, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Aug 9, 2022 GO-2023-1898 +1 more

  GO-2023-1898: HashiCorp Boundary Workers Store Rotated Credentials in Plaintext Even When Key Management Service Configured in github.com/hashicorp/boundary

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Jul 6, 2022 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Jun 20, 2022 GO-2024-2532

  GO-2024-2532: Boundary vulnerable to session hijacking through TLS certificate tampering in github.com/hashicorp/boundary

Changes in this version

+ func NewWorkerProxyServiceServer(scsClient *atomic.Value, ssClient *atomic.Value) *workerProxyServiceServer

+ type Config struct

+ RawConfig *config.Config

+ type HandlerProperties struct

+ ListenerConfig *listenerutil.ListenerConfig

+ type LastStatusInformation struct

+ LastCalculatedUpstreams []string

+ StatusTime time.Time

+ type TestConnectionInfo struct

+ CloseTime time.Time

+ Id string

+ Status pbs.CONNECTIONSTATUS

+ type TestSessionInfo struct

+ Connections map[string]TestConnectionInfo

+ Id string

+ Status pbs.SESSIONSTATUS

+ type TestWorker struct

+ func NewTestWorker(t testing.TB, opts *TestWorkerOpts) *TestWorker

+ func (tw *TestWorker) AddClusterWorkerMember(t testing.TB, opts *TestWorkerOpts) *TestWorker

+ func (tw *TestWorker) Cancel()

+ func (tw *TestWorker) Config() *Config

+ func (tw *TestWorker) Context() context.Context

+ func (tw *TestWorker) LookupSession(id string) (TestSessionInfo, bool)

+ func (tw *TestWorker) Name() string

+ func (tw *TestWorker) ProxyAddrs() []string

+ func (tw *TestWorker) Shutdown()

+ func (tw *TestWorker) UpstreamAddrs() []string

+ func (tw *TestWorker) Worker() *Worker

+ type TestWorkerOpts struct

+ AuthRotationPeriod time.Duration

+ Config *config.Config

+ DisableAutoStart bool

+ InitialUpstreams []string

+ Logger hclog.Logger

+ Name string

+ NonceFn randFn

+ PrometheusRegisterer prometheus.Registerer

+ StatusGracePeriodDuration time.Duration

+ WorkerAuthKms wrapping.Wrapper

+ WorkerAuthStorageKms wrapping.Wrapper

+ WorkerAuthStoragePath string

+ type Worker struct

+ TestOverrideAuthRotationPeriod time.Duration

+ TestOverrideX509VerifyCertPool *x509.CertPool

+ TestOverrideX509VerifyDnsName string

+ WorkerAuthCurrentKeyId *ua.String

+ WorkerAuthRegistrationRequest string

+ WorkerAuthStorage *nodeefile.Storage

+ func New(conf *Config) (*Worker, error)

+ func (w *Worker) ControllerMultihopConn() (multihop.MultihopServiceClient, error)

+ func (w *Worker) ControllerServerCoordinationServiceConn() (pbs.ServerCoordinationServiceClient, error)

+ func (w *Worker) ControllerSessionConn() (pbs.SessionServiceClient, error)

+ func (w *Worker) GrpcClientConn() (*grpc.ClientConn, error)

+ func (w *Worker) LastStatusSuccess() *LastStatusInformation

+ func (w *Worker) ParseAndStoreTags(incoming map[string][]string)

+ func (w *Worker) Resolver() *manual.Resolver

+ func (w *Worker) Shutdown() error

+ func (w *Worker) Start() error

+ func (w *Worker) StartControllerConnections() error

+ func (w *Worker) WaitForNextSuccessfulStatusUpdate() error