Allow configuration of ServerName used by peer clients to prevent use…

… of static IP SANs

Makefile

@@ -28,15 +28,18 @@ proto:
 
 .PHONY: certs
 certs:
-	rm certs/*.key certs/*.srl certs/*.csr certs/*.pem
+	rm certs/*.key || rm certs/*.srl || rm certs/*.csr || rm certs/*.pem || rm certs/*.cert || true
 	openssl genrsa -out certs/ca.key 4096
 	openssl req -new -x509 -key certs/ca.key -sha256 -subj "/C=US/ST=TX/O=Mailgun Technologies, Inc." -days 3650 -out certs/ca.cert
 	openssl genrsa -out certs/gubernator.key 4096
 	openssl req -new -key certs/gubernator.key -out certs/gubernator.csr -config certs/gubernator.conf
-	openssl x509 -req -in certs/gubernator.csr -CA certs/ca.cert -CAkey certs/ca.key -CAcreateserial -out certs/gubernator.pem -days 3650 -sha256 -extfile certs/gubernator.conf -extensions req_ext
+	openssl x509 -req -in certs/gubernator.csr -CA certs/ca.cert -CAkey certs/ca.key -set_serial 1 -out certs/gubernator.pem -days 3650 -sha256 -extfile certs/gubernator.conf -extensions req_ext
+	openssl genrsa -out certs/gubernator_no_ip_san.key 4096
+	openssl req -new -key certs/gubernator_no_ip_san.key -out certs/gubernator_no_ip_san.csr -config certs/gubernator_no_ip_san.conf
+	openssl x509 -req -in certs/gubernator_no_ip_san.csr -CA certs/ca.cert -CAkey certs/ca.key -set_serial 2 -out certs/gubernator_no_ip_san.pem -days 3650 -sha256 -extfile certs/gubernator_no_ip_san.conf -extensions req_ext
 	# Client Auth
 	openssl req -new -x509 -days 3650 -keyout certs/client-auth-ca.key -out certs/client-auth-ca.pem -subj "/C=TX/ST=TX/O=Mailgun Technologies, Inc./CN=mailgun.com/[email protected]" -passout pass:test
 	openssl genrsa -out certs/client-auth.key 2048
 	openssl req -sha1 -key certs/client-auth.key -new -out certs/client-auth.req -subj "/C=US/ST=TX/O=Mailgun Technologies, Inc./CN=client.com/[email protected]"
-	openssl x509 -req -days 3650 -in certs/client-auth.req -CA certs/client-auth-ca.pem -CAkey certs/client-auth-ca.key -passin pass:test -out certs/client-auth.pem
-	openssl x509 -extfile certs/client-auth.conf -extensions ssl_client -req -days 3650 -in certs/client-auth.req -CA certs/client-auth-ca.pem -CAkey certs/client-auth-ca.key -passin pass:test -out certs/client-auth.pem
+	openssl x509 -req -days 3650 -in certs/client-auth.req -CA certs/client-auth-ca.pem -CAkey certs/client-auth-ca.key -set_serial 3 -passin pass:test -out certs/client-auth.pem
+	openssl x509 -extfile certs/client-auth.conf -extensions ssl_client -req -days 3650 -in certs/client-auth.req -CA certs/client-auth-ca.pem -CAkey certs/client-auth-ca.key -set_serial 4 -passin pass:test -out certs/client-auth.pem

README.md

@@ -317,7 +317,7 @@ self signed certs by running `docker-compose-tls.yaml`
 $ docker-compose -f docker-compose-tls.yaml up -d
 
 # Hit the HTTP API at localhost:9080 (GRPC is at 9081)
-$ curl --cacert certs/ca.pem --cert certs/gubernator.pem --key certs/gubernator.key  https://localhost:9080/v1/HealthCheck
+$ curl --cacert certs/ca.cert --cert certs/gubernator.pem --key certs/gubernator.key  https://localhost:9080/v1/HealthCheck
 ```
 
 ### Configuration

certs/ca.cert

@@ -0,0 +1,29 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

certs/ca.key

@@ -1,51 +1,51 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIIJKQIBAAKCAgEAvv4lHiIN5r+D5Ih6g0EQEo3ZB3P/GPdXZCJlybrgXssbn+OD
-mcU42Iq25IzF+Dq65SRZvg+ZGI59uXmh4T0eyyBY1JjQAb+7PpXWU+GYcFIEOMDR
-6IHOG2KLURYgmGL9AcgFP38ZOYRFczZMwpK7JfLDbFPjZkjhcGhnzBLPF4y3xA75
-E0cseJ6OA8reEKzhxVXoECqnLnlcZTbltlLmc4EI7tE2dAgvZoIx6K5tpR+6aOem
-0gz/YwniJdj5mHnNL5bEMtlESzFEn8txp8iTgsKgfSI+2IRkVA+zg7hpq50+m4Dv
-P6qmZ+e92ovMCiC89y5Oua11n5DJQeeo0wf/B8BTkphJ9TYNcvZJybB+YGemBT7G
-AwyxM0kcO2Bl8SH6FDrglXgQpYCJGVdOnGBqfQir288Rvt3Q463v6gnProJLkCPM
-eODKSdiPbn2tbUwo1hf4fUHiQ52bQHH15cfE5rG0lokkdqYj3WRPQ1YkYuDLY95K
-MoAEx+tyaVhIRyTc/vUOCif4QOG/o1IMcyfj15Z4NBHLBNnUuR3uC4Yv1tq68ZmI
-ZxZTjStCogd7sAJOefJKA/AhHdYSlwfW70tVSy2w9+y8QlPErT4C4386KVyW1jUh
-JXb8vpRzipx7Z/3vQneFGEef2V16I6EWm4UEJGoX3QGIF7ZWd25mrdEFZfMCAwEA
-AQKCAgBCSP/m0ljSwZrrwLYMQZNrbRFqdcaOCqGo3gtHlPTz0TfYKOTuhDUzagkJ
-jxXSDcf5aMFApjcy/5kAuwcEnerHAoXx2ssuIDXDBcuptvzp1n0imUEAmbRHas8B
-KFXNrWUzrhCsNdcyUAaucqT3TmdnRzatrPuZ7ydWlNWZTNnUyYCpqaymFSiJADY3
-eLvTO7zreOIeYj89cN8xPXlB6smSQrEv+SoV4RVaVUsu/wKMsVNHv0X1Vo939uEm
-04PkeDlPD9st7pu2IPY5Iylh2snfMt7yLuVyzZfoWL6rs1/xMJSe8YOXLAmuvA33
-AFejGDOc8dReuqW86EoA9n5wJzFKDIHI4lo1gThULKaP4bUORr20KY+txxUMCf5+
-zkzuFfaPMB5AVvj6w6tbw2XRYlyC3Kq3WkmwYWel0vvnLUrDn6x0PdI39tdQqJmQ
-Eh4HEWfm8fV6evPx+DH8wus1p6Ke8ITbJ6AIB200Ju5D4ZNgY00K1Jyh3uvnIwDe
-VHSr9znaRreHQiOfU81c4hI7ktZV8g5uAOToGGINSz0GkhQ6/yQJpqQvhT3eQvVa
-mVKVM+8CQsZKw4xtd1hc33GFoN7Tt5MkpNGJkdD4aR2zFXfLuangV0xBgl43q8j5
-pmi7rDwsvUifra47Dhz9Wdm4i2mUKiR7NNhZ6yljYqNZu4MkYQKCAQEA7bZi8GhE
-tRiciou3T3I7/z/iZIIWuSi011Gfl9bR4UfzVLK7KDR2ZcHufwWWrkk03jL0nj0f
-UalTOFNnthOXbyW1aq+TTHI15n2nK56tSKzHqDe13kTbxuq0jEXA4dFT3m+oj4LC
-KupZYdXVA5100kYbqIRfaxvFAVTXt05IEcIbbYOo4/IrXXKw4OOGnzojc7l8zNKB
-zmF7sfz+HBk5aQoujiEpi8mcHq8UyyektBSO2VN/Y7DvytfUrjYHMbs7345N93xk
-Re2/AifTa+T/PYL1XPRLjhL2zoh9z5cc/XHan514Lxj9JGBTeshRB09l1a4KT9us
-OIiriE3J6zj54wKCAQEAza+j67F5RQBv8Tt7lB/T6apYB9EmXGScZOjR3fgvappd
-9lvy8nXu64b2dF25Gh5AcVzGrKM0jeYXEJOJcC1lu4wwFGBUSP+bM1YC7omwUacG
-Xjwy3EE56m6I+7E9ndBLD3boDKmCPoAIzBh96aMDGKsCEkejBuOEp41UVyovvkyK
-ig17JSyvKDPc2YF2JpA8TAZgkRohoKXQMp18CnGXEcjLTFkF8mLqAVv3lwJy+5xM
-TM8+A4+xvmc/pTm06wiogbsdCCUb/7JqhjTazXvvxOfB/e4D9quPoc3cPbLTSq+d
-jzQGt604lFuPlInk6UJw8cHEc9ehn44KbroyJT7gsQKCAQEAyCZSZhOVDlpbrDf5
-r7YCmGek6nWyRlLk+YsrckCZVTMsyfr3pOGPcxx4AJGnDrZrAlArMXVLgomsnXd0
-kpUqY5Z/iwWsY6iig6D2+b5QLynzrkrCIhUea/1A6f7tafXDxT2E0tkJPfM2MS9H
-fRS9wTLwpNJYOSoXlYhnXVtXSUSDrZE2yj8kjjk8fw50Ums0YIMkdp0kWK4x5Wqc
-VvJSKYQ+MMPxZFbr0dYfDvMhNdM9d/VbBIh9TvCtjcXGBvScdB4wvZoKH+sPcfQw
-it80ngk/KPY1C7oh/0JjlD+rVCbiKpT/FcDXnCJTB8XUm/AZUXKKEjVna+5/Z3P/
-+MNvewKCAQEAwQqLSfWy3zPd3AX7obWNacxZ+lwtKKG0tnBcJ3t65Q4kCceaaDyP
-E7YDMIuV4hFqYfq06+nwtQyxsPkHEKVKyY50wWr3L9vViYS8E6xeMwQTUfYltdnx
-xTggkDh0n9yR1d2/Q8MDXi1EFGkYI2K+0TQOKaHaO+jk42wdMAGD9ZJYo+CrJuSd
-L5odOHXssZzFOoTxtL1VujRlBlwPwq2BH0vYobsbfbWf8c6ivLOrvsGeSqhmh2kh
-ZJX6gdN7HOtvWvKF+NL7SCvnFjYc9KXRDniE9RGh3qx9jVprzew7qejQc0pc055b
-b8HPK5WPpeyZnAxDmIVURy9EU0+lKJeuwQKCAQBWtlQNdCfpOCSBDCZQ7y2Igbv9
-hYCK4+1KaqnGVCvd1XrVLzykCIlyCbMDum3Aiv4jMPFg+jtbEE8q5L6OD6bRIbdU
-l7jQdGiCPcfp/aezb71scMC/YdYwDAuYkfDKylxfdvalqepvQ952HzbFv6qSW0nU
-NpVwrgE3ZkFYzu2fV9u4mubkxb4FOYAlVyOnX+VVjUwBFD6MpUG3sTPjfj0Tgd1m
-BKueLwgfbQJa6i+TnCq+PEAFXlYfkC/gyuXbCgynFao2tBpJzIXPJj+lNascXeNT
-6PahNZ1mElSNYyEA4INVDjUGpGPVnkBRkmUIodfwzGrIheRR3khOl2MPf+8z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 -----END RSA PRIVATE KEY-----

certs/ca.pem

@@ -1,29 +1,29 @@
 -----BEGIN CERTIFICATE-----
-MIIE+jCCAuICCQD4067NpJ3JHjANBgkqhkiG9w0BAQsFADA/MQswCQYDVQQGEwJV
+MIIE+jCCAuICCQCAJPaQbOxgajANBgkqhkiG9w0BAQsFADA/MQswCQYDVQQGEwJV
 UzELMAkGA1UECAwCVFgxIzAhBgNVBAoMGk1haWxndW4gVGVjaG5vbG9naWVzLCBJ
-bmMuMB4XDTIwMTAyNjIxMjkwMloXDTMwMTAyNDIxMjkwMlowPzELMAkGA1UEBhMC
+bmMuMB4XDTIyMDMwMjIxMzM0MFoXDTMyMDIyODIxMzM0MFowPzELMAkGA1UEBhMC
 VVMxCzAJBgNVBAgMAlRYMSMwIQYDVQQKDBpNYWlsZ3VuIFRlY2hub2xvZ2llcywg
-SW5jLjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAL7+JR4iDea/g+SI
-eoNBEBKN2Qdz/xj3V2QiZcm64F7LG5/jg5nFONiKtuSMxfg6uuUkWb4PmRiOfbl5
-oeE9HssgWNSY0AG/uz6V1lPhmHBSBDjA0eiBzhtii1EWIJhi/QHIBT9/GTmERXM2
-TMKSuyXyw2xT42ZI4XBoZ8wSzxeMt8QO+RNHLHiejgPK3hCs4cVV6BAqpy55XGU2
-5bZS5nOBCO7RNnQIL2aCMeiubaUfumjnptIM/2MJ4iXY+Zh5zS+WxDLZREsxRJ/L
-cafIk4LCoH0iPtiEZFQPs4O4aaudPpuA7z+qpmfnvdqLzAogvPcuTrmtdZ+QyUHn
-qNMH/wfAU5KYSfU2DXL2ScmwfmBnpgU+xgMMsTNJHDtgZfEh+hQ64JV4EKWAiRlX
-Tpxgan0Iq9vPEb7d0OOt7+oJz66CS5AjzHjgyknYj259rW1MKNYX+H1B4kOdm0Bx
-9eXHxOaxtJaJJHamI91kT0NWJGLgy2PeSjKABMfrcmlYSEck3P71Dgon+EDhv6NS
-DHMn49eWeDQRywTZ1Lkd7guGL9bauvGZiGcWU40rQqIHe7ACTnnySgPwIR3WEpcH
-1u9LVUstsPfsvEJTxK0+AuN/OilcltY1ISV2/L6Uc4qce2f970J3hRhHn9ldeiOh
-FpuFBCRqF90BiBe2VnduZq3RBWXzAgMBAAEwDQYJKoZIhvcNAQELBQADggIBAGU4
-V3YItAgFN8hp+ipVBmwz2Fi/ui+/RBuz11zhpYg3V1BZIcsHt1QaWhwfOydipeiW
-jScQ2fu0nawJlpM275R63xeJcNlp1qR0cbKFP5u7V5EOLIcwpOACKZ9rJUS3IrQ1
-yxdaM/jlh4y3wckiCC4+vnXtWa4EX5/euDlBU9hEJxHhwojEbgd1W91tGjkzv/t8
-UzIuxjWLMBfcVaKSiFOg8fBZttDiI578/rTz560+wtxwxgriK0ZZU01W9do9x+Yl
-tHToZvIB6vwfALWGhiVSNv5X5l40akRFRHuIOZqrRrP+3Avhq6QReYeaeI4C7eCw
-aNaDIEj9+5b/N7CkHwgI5gaogQtx4brgDOF+bw1+1bvQ3LCG1f12AKX2E+YEpr/w
-/lv96VFPnmktadnCGgzwiN3poEBz6seEtRWqFWD2yBySy5CSuhmo0MOGuYgyn2/2
-nYjB0oWyT7dlanqtv+N4xdV+0EqqQANfnHBd4AUOZiDcQPXpygn1JsGr29VxTxh4
-xN8rgcHEiDYRw78MHLxAXM5C8mhqLeQxGYHsILwAGeFFGmFMontiEnrKdSUqEgZ2
-W1yl0ZPehOLoen1aheAem5gvFV5AMB6iQqiG+CGUFeLxtHz1odpYHpR54NKKh0tj
-6pitN2Yt2GIiW4REmWP91B9ngWhSXpGHlB48mbgO
+SW5jLjCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKnZL6a+E0LZQMwO
+kE+kLsr922C6AsTZR2lHyejp09yHakOB/11UsEHp50USqqZG4ewHalnJAIbjzOak
+Uj2jgqD663jtBtL8pnCAFnYqcFhTJhkuKcESkq4j9h/LfhoIqeBIN5ujiFTt3yHK
+O3/m3KbZ/WbNWp7j+VvJytVzYXFvg2pSNLTs7jN0dqvSWZcjtUbEJUUb27QEP+8E
+Ebn9qYh7AZePtYtU9leY4faprBN7V8dtIZs3pHqgYhgihCjASLHpmyADnv6vWsUQ
+yyoDmLYZb6J2u4iaD5wOv/4zcEf2ZkgdrM7dy/GJ0/mBVM8lxWVFaLqtZbfYRDSa
+hP/BGReM2e+IQ27esA6EtgI0GG6gKFKlsZjmXIpSvPfvVAXKwk9pi6u0sikRxlAW
+ofhVHFvn6LXcwwroBDIS7DZ7uW/YobDOnU07W9pqQiOLCzT/vEeKcAwM6FfQtXPe
+RTUYv+p7KPrR2pq/BmeyAyMogcYfE/LQQ85AA7fvxSrQUAs+V5/6wn32HoOEGWNJ
+PDkOG76TSscZc8K6hdFOIKVS7jtiPOcffqXCVQJQAk1++w0Ng/TTwa3BrBJlYcfN
+7/vWEIGBWxyNP9hHlFG6ZnhrTByKVIVekRDl3vvDYWGZPt9TV+r2LZ5KKGRCX52G
+6akiLCkDxCLVbmfNZFEnCpdK1UzFAgMBAAEwDQYJKoZIhvcNAQELBQADggIBABST
+COfhSpgFPZUTdXDArlH94X1WH5t6/kcySjTIuPZfhRjRtxoUZ2Hz36dFgGkwpiK6
+3Ce6vhFDBFGeXWU9EE2VU8C8esJ5e+I2Nl/7G/RWfDzQg18DWf6UhvpErz0G8cl2
+K7jlRTA1Z6ZpNR0sWIMPIGOnkiMoAp2YA76rmJeccFPwOuC2pCZjKQiq/2rRul/h
+6Vyy6ri2TaBSbWAMEEEUe/jpq9SHVlooiCiWj0gIL/+ExvhL1sUn+iskgldDyxF3
+R4MQkaM2hsjVgv+/i63nhohpREsaQw8k2/p0ebLTztkssiWyoxWQc9BN3tiSn4ZG
+iH+fVmZPFhTvpn+QzouSBWSIfcW4vShPiCr7DVbOqj3wIJEphggJ53xECOSlS6eE
+i91znWta+IF/505gcQACQHRm7ZvcTqjX+2akbaE+EIX13q49cS7KCYnbMxgYyOyD
+WEqqrnJADTUJGF9kTBIj/5My76HGQ7o0SA0vaqeJVoUpWvZFMK9HzYr82J8evZih
+DRL8zjMrCb7tbqE8rLBcEpaS+ix/7HSW6lC9E3Qw7QVA0vNEtdam8M7SzYHjlq4I
+SmKuHYPSu0gdaclK5qeHFMuC6ODwjQCV54tIOUIefPf5+ngjlIge6GIHHX71to0s
+CrtOZ2aNbZekLLpFX7xcqR2VylmY72HuFvrA4QrF
 -----END CERTIFICATE-----

certs/client-auth-ca.key

@@ -1,30 +1,30 @@
 -----BEGIN ENCRYPTED PRIVATE KEY-----
-MIIFHzBJBgkqhkiG9w0BBQ0wPDAbBgkqhkiG9w0BBQwwDgQIJCKFdsqSX+sCAggA
-MB0GCWCGSAFlAwQBKgQQhfE6viFG/7MEMoDHe0N5agSCBNAv5UKv5KIAbN7bu+3Q
-vQaSQqFtEjWHZ0op7MtwtYrZdRMU3RYGkaXEqBNPImD5Z7tP7qPIDDh9VRVgHk6K
-tQFRmr/xqsUTmsz74VGfieyxl92+IEhUaIaBgIcW7TStoQpVV+mHBi1hfvGpecmU
-VbEwM8ToYlqHxGvoK6AAANP3bOezGlv4DqNI87gVlp2ujctnKZ8dY007WrsiUCVI
-GjT179kN6oiRxKKRehsrVgY9WusM5sM2lNTbwY+G7r/u3Hk8wkfIB0Iin3k8QwV7
-OpYaWkbxrRCDsAOvmc6xQhUjJjjtAn/EKcpstvfxpXyTSJHpK76GoHkBN2WOvgcf
-LinOYkld+Zx/fOVDjuESqMCvPypPb3n2i45rZ8pVCc6jk2/JaZWE8ldFDmxvp04A
-NX3sb0+THMOfejgSNBPeNUXcqjI2vbY3thdkzf+IvxOk2LIj1mHGratAcBW9MPqE
-nUKkY4OApt8fKb27xL5g6YXf5HoMHckEcB9krmDfWte/qtXmHl6ZUv/EqpQsrIvz
-yTpTJ4DxlnalWv9Wp65juZxAJbaDYArqTyttnDIvNbTQ5Bm3l1iGa2CJnEITUbF1
-huQ4lxJmyrZnS+5ki76McTCo6ND/3vqeyCbc/uIftbCxefoUxFA0O3ZGwK7EZUOH
-d3nVT/+XH8ivmZ5MDPA9qiqAtUdvPh87QPzeIGgw91xiHcjOnEcJlnxPaFqLWx2F
-Me0UwAXjmQgmjegL23+NQLPRh5mXwmgawAbyH0Cm0WhCumBeEmonXlmm37OXz0GX
-zi3uLmxvY0jnk37+oqUDbKw0v5xI3tar2BDl/+/Q4PgC4mLWFFWrGT4Fho4yYSr6
-7eKLahPl1a1jk+7OvWivct8QkbXVXDZHz6/HVbIi+OwwVeyEexH0DCzIvgqXSHSJ
-pkEQCHoyP+vYcpLeRbT37OLuPY9MQckW8a+EcGUDn5dJxsHKTUSdn05ILk8g71t2
-qag6BO0P6XJvPAJo4QyB2Om2PpoeEjbaT6rtjoT4tkYbD3/v59UNEYpnJR3knYTw
-HEsieTXTGLV0D3iojiwU2G5dcndJUxmRMexCwPgMJw0spb35mUbuKKqYcSrZ1K0m
-RSFeT9/RCVVzbul91IUARPVaUyE1FzyN1RALgL84HKVPwMsfOjaXkvAIvvNYT1Ag
-sFRYRYpu/aEClZNGaRrbu1jmbew1wHeD70b1iy8GjRhFz70igT+H3i0bVHEM/6uq
-VRMLR7LsfXlVgelyvWrI3p6yjKEGwgVNdWQM7FbbPGZOUcwFDlgTqzr551szQm4Z
-eRUN5KMcxMlmkIL1enMsVMG0MVi6o1ecF7qoJY+GSgoVEVYyYMFj+FBq0+jZfQPK
-YQsFB4hyQgUQiZE8fkOXjXVp+cdZtLcehHSfHtiJruPcWPDhijs1A9VD2vIDRgfv
-VU75JTWc/S/FwwfmhYE1R59XZd5avhUETq7uY16fhYROYVKSPUStPHDnjOL4vJag
-KBtObke1WbprPMINj9qxTSRddVRp15BlDSry492k/fMdcaxnpPQ5LTm4dkx4hkKc
-G3iPHtTMc5rtzdCzuaDZKYuCqK5xAHXLLUXJyN/44jWaS470c7FCzwGlfGmYbgYo
-PeD0sov0pRLf1E9XTqzqfu8sYg==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 -----END ENCRYPTED PRIVATE KEY-----