tls

It seems Caddy does not support wildcards/ expression matching in the reverse proxy's header_up.

For example this does not remove any headers:

header_up -X-SHIBBOLETH-*

This works as expected, but is limited in its use:

header_up -X-SHIBBOLETH-LOGIN

It'd be great if Caddy would support wildcards/ expression matching in the reverse proxy's header_up/ header_down.

Right now in different places in the SE codebase there are references to /opt and then as well to /usr.

All SE code should reference one place only. Could someone please create a PR that fixes this.

This PR should also take PR #454 into consideration (no conflicts)

I noticed the following errors from go vet:

$ go vet ./...
# github.com/jetstack/cert-manager/cmd/webhook/app/testing
cmd/webhook/app/testing/testwebhook.go:106:4: call to (*T).Fatalf from a non-test goroutine
# github.com/jetstack/cert-manager/test/integration/framework
test/integration/framework/helpers.go:68:4: call to (*T).Fatal from a non-test goroutine
# github.com/jetstack

There's little information about what keys and values are in the output, what it means and how they are related to the screen output. In general that needs to be added. (special topics see #1675, #1674)

Problem:

A common pattern is:

GUARD(s2n_stuffer_skip_write(stuffer, bytes_to_write));
uint8_t* ptr = suffer->blob.data + stuffer->write_cursor - bytes_to_write;

which could be simplified.

Solution:

*ptr could be an *out parameter to s2n_stuffer_skip_write

• Does this change what S2N sends over the wire? No.
• Does this change any public APIs? No.

What would you like to be added

We can't query smallstep for anything related to certs because the only thing in the DB is the bytes of the cert. Storing the cert alongside more columns like the common name, not after date, and more, would let us enable more complex queries, and optimize performance for future use cases.

Why this is needed

Enable searching of Certificates signed by attrib

Summary

Minor:
When moving from key handles to key identifiers, a bug was introduced to the examples in getting_started.md - key is used both as a variable holding raw key material for import and as the key identifier.