maxlambrecht / rust-spiffe / 28296114690

84%

push

github

security: harden TLS leaf validation and add JWT/TLS regression tests

Reject rustls peer leaves that omit KeyUsage or do not set
digitalSignature. Add JWT algorithm/key-family confusion tests,
a TLS trust-domain confusion regression test, and clearer
documentation for the default permissive authorizer configuration.
Re-export AuthorizerConfigError and add PeerIdentity::require_spiffe_id().

Signed-off-by: Max Lambrecht <maxlambrecht@gmail.com>

127 of 130 new or added lines in 3 files covered. (97.69%)

6326 of 7550 relevant lines covered (83.79%)

744.06 hits per line