pomerium / pomerium / 10323660310

45%

Build Type

push

github

Committed by web-flow

Commit Message

envoy: log mtls failures (#5210)

envoy: log mtls failures

This implements limited listener-based access logging for downstream
transport failures, only enabled when downstream_mtls.enforcement is
set to 'reject_connection'. Client certificate details and the error
message will be logged.

Additionally, the new key 'client-certificate' can be set in the
access_log_fields list in the configuration, which will add peer
certificate properties (issuer, subject, SANs) to the existing
per-request http logs.

---------

Co-authored-by: Kenneth Jenkins <51246568+kenjenkins@users.noreply.github.com>

Run Details

1 of 86 new or added lines in 2 files covered. (1.16%)

5 existing lines in 3 files now uncovered.

18098 of 31845 relevant lines covered (56.83%)

106.1 hits per line