pomerium / pomerium / 5824021938

45%

push

github

config: add support for max_verify_depth (#4452)

Add a new max_verify_depth option to the downstream_mtls settings group,
with a default value of 1 (to match the behavior of current Pomerium
releases).

Populate the corresponding setting within Envoy, and also implement a
depth check within isValidClientCertificate() in the authorize service.

33 of 33 new or added lines in 6 files covered. (100.0%)

14108 of 22073 relevant lines covered (63.92%)

120.84 hits per line