Merge pull request #1388 from cyberark/bump-version-1.7.3

Bump version to 1.7.3

CHANGELOG.md

@@ -6,16 +6,23 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+## [1.7.3] - 2020-03-04
 ### Changed
 - Update k8s authenticator client version to
   [0.19.1](https://github.com/cyberark/conjur-authn-k8s-client/blob/master/CHANGELOG.md#0191---2021-02-08),
   which streamlines the parsing of authentication responses, updates the
   project Golang version to v1.15, and improves error messaging.
 
 ### Fixed
-- Fixes PostgreSQL signaling in case of SSLRequest from the client,
-  correctly sends SSL Not Supported message instead of general error.
-  Supports downgrade to unsecured connection in case of `SSLMode = prefer`.  
+- Secretless now sends a valid "SSL is not supported" response per the
+  PostgreSQL protocol standard when a client attempts to open an SSL connection
+  (i.e. when configured with SSL mode `require` or `prefer`) via the PostgreSQL
+  connector. When the client is configured with SSL mode `prefer`, the updated
+  response enables the client to downgrade to an insecure connection and
+  continue. Previously, clients sending requests using either `require` or
+  `prefer` SSL mode would receive a generic error from Secretless, which made it
+  harder to determine the root cause of the problem and broke how `prefer` is
+  expected to work.
   [cyberark/secretless-broker#1377](https://github.com/cyberark/secretless-broker/issues/1377)
 
 ## [1.7.2] - 2020-02-05
@@ -557,7 +564,7 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 ### Added
 - The first tagged version.
 
-[Unreleased]: https://github.com/cyberark/secretless-broker/compare/v1.7.2...HEAD
+[Unreleased]: https://github.com/cyberark/secretless-broker/compare/v1.7.3...HEAD
 [0.2.0]: https://github.com/cyberark/secretless-broker/compare/v0.1.0...v0.2.0
 [0.3.0]: https://github.com/cyberark/secretless-broker/compare/v0.2.0...v0.3.0
 [0.4.0]: https://github.com/cyberark/secretless-broker/compare/v0.3.0...v0.4.0
@@ -586,3 +593,4 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 [1.7.0]: https://github.com/cyberark/secretless-broker/compare/v1.6.0...v1.7.0
 [1.7.1]: https://github.com/cyberark/secretless-broker/compare/v1.7.0...v1.7.1
 [1.7.2]: https://github.com/cyberark/secretless-broker/compare/v1.7.1...v1.7.2
+[1.7.3]: https://github.com/cyberark/secretless-broker/compare/v1.7.2...v1.7.3

Dockerfile

@@ -1,5 +1,5 @@
-FROM golang:1.13-stretch as secretless-builder
-MAINTAINER Conjur Inc.
+FROM golang:1.15-buster as secretless-builder
+MAINTAINER CyberArk Software Ltd.
 LABEL builder="secretless-builder"
 
 WORKDIR /secretless
@@ -32,7 +32,7 @@ RUN go build -ldflags="-X github.com/cyberark/secretless-broker/pkg/secretless.T
 
 # =================== MAIN CONTAINER ===================
 FROM alpine:3.12 as secretless-broker
-MAINTAINER CyberArk Software, Inc.
+MAINTAINER CyberArk Software Ltd.
 
 RUN apk add -u shadow libc6-compat openssl && \
     # Add Limited user
@@ -71,7 +71,7 @@ COPY --from=secretless-builder /secretless/dist/linux/amd64/secretless-broker \
 
 # =================== MAIN CONTAINER (REDHAT) ===================
 FROM registry.access.redhat.com/rhel as secretless-broker-redhat
-MAINTAINER CyberArk Software, Inc.
+MAINTAINER CyberArk Software Ltd.
 
 ARG VERSION
 

Dockerfile.debug

@@ -1,5 +1,5 @@
-FROM golang:1.13-stretch as secretless-builder
-MAINTAINER Conjur Inc.
+FROM golang:1.15-buster as secretless-builder
+MAINTAINER CyberArk Software Ltd.
 LABEL builder="secretless-builder"
 
 WORKDIR /secretless
@@ -36,7 +36,7 @@ RUN go build -ldflags="-X github.com/cyberark/secretless-broker/pkg/secretless.T
 
 # =================== MAIN CONTAINER ===================
 FROM alpine:3.12 as secretless-broker
-MAINTAINER CyberArk Software, Inc.
+MAINTAINER CyberArk Software Ltd.
 
 RUN apk add -u shadow libc6-compat && \
     # Add Limited user

Dockerfile.dev

@@ -1,5 +1,5 @@
-FROM golang:1.13-stretch
-MAINTAINER Conjur Inc.
+FROM golang:1.15-buster
+MAINTAINER CyberArk Software Ltd.
 
 RUN apt-get update && \
     apt-get install -y curl \

Dockerfile.test

@@ -1,5 +1,5 @@
-FROM golang:1.13-alpine
-MAINTAINER Conjur Inc.
+FROM golang:1.15-alpine
+MAINTAINER CyberArk Software Ltd.
 LABEL id="secretless-test-runner"
 
 WORKDIR /secretless

NOTICES.txt

@@ -13,7 +13,7 @@ SECTION 1: Apache License 2.0
 >>> github.com/containerd/containerd-1.3.2
 >>> github.com/CrunchyData/crunchy-proxy-0.0.0-20170717145745-c0da73ca9dde
 >>> github.com/cyberark/conjur-api-go-0.5.2
->>> github.com/cyberark/conjur-authn-k8s-client-0.19.0
+>>> github.com/cyberark/conjur-authn-k8s-client-0.19.1
 >>> github.com/docker/distribution-2.7.1
 >>> github.com/docker/docker-1.4.2-0.20191231165639-e6f6c35b7902
 >>> github.com/docker/go-connections-0.4.0
@@ -46,7 +46,7 @@ SECTION 3: BSD 3-clause "New" or "Revised" License
 >>> github.com/fsnotify/fsnotify-1.4.7
 >>> github.com/imdario/mergo-0.3.8
 >>> github.com/spf13/pflag-1.0.5
->>> golang.org/x/crypto-0.0.0-20190510104115-cbcb75029529
+>>> golang.org/x/crypto-0.0.0-20200323165209-0ec3e9974c59
 
 
 
@@ -59,10 +59,11 @@ SECTION 4: MIT License
 >>> github.com/gregjones/httpcache-0.0.0-20190611155906-901d90724c79
 >>> github.com/joho/godotenv-1.2.0
 >>> github.com/json-iterator/go-1.1.8
+>>> github.com/keybase/go-keychain-0.0.0-20201121013009-976c83ec27a6
 >>> github.com/lib/pq-0.0.0-20180123210206-19c8e9ad0095
 >>> github.com/orderbynull/lottip-0.0.0-20191127192149-2109e1a4fcc5
 >>> github.com/smartystreets/goconvey-0.0.0-20190731233626-505e41936337
->>> github.com/stretchr/testify-1.3.0
+>>> github.com/stretchr/testify-1.5.1
 >>> gopkg.in/yaml.v2-2.2.2
 
 
@@ -163,7 +164,7 @@ See the License for the specific language governing permissions and
 limitations under the License.
 
 
->>> github.com/cyberark/conjur-authn-k8s-client-0.19.0
+>>> github.com/cyberark/conjur-authn-k8s-client-0.19.1
 
 Copyright (c) 2020 CyberArk Software Ltd. All rights reserved.
 
@@ -643,7 +644,7 @@ THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 
->>> golang.org/x/crypto-0.0.0-20190510104115-cbcb75029529
+>>> golang.org/x/crypto-0.0.0-20200323165209-0ec3e9974c59
 
 Copyright (c) 2009 The Go Authors. All rights reserved.
 
@@ -834,6 +835,30 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 
+>>> github.com/keybase/go-keychain-0.0.0-20201121013009-976c83ec27a6
+
+Copyright (c) 2015 Keybase
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+
+
 >>> github.com/lib/pq-0.0.0-20180123210206-19c8e9ad0095
 
 Copyright (c) 2011-2013, 'pq' Contributors Portions Copyright (C) 2011 Blake Mizerany
@@ -871,7 +896,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 NOTE: Various optional and subordinate components carry their own licensing requirements and restrictions. Use of those components is subject to the terms and conditions outlined the respective license of each component.
 
 
->>> github.com/stretchr/testify-1.3.0
+>>> github.com/stretchr/testify-1.5.1
 
 MIT License
 

pkg/secretless/version.go

@@ -4,7 +4,7 @@ import "fmt"
 
 // Version field is a SemVer that should indicate the baked-in version
 // of the broker
-var Version = "1.7.2"
+var Version = "1.7.3"
 
 // Tag field denotes the specific build type for the broker. It may
 // be replaced by compile-time variables if needed to provide the git

test/connector/http/generic/certs/README.md

@@ -6,12 +6,20 @@ These cert-key pairs are self-signed and were generated using an
 invocation of openssl similar to this:
 
 ```bash
-openssl req \
+function gen_cert() {
+  local suffix=$1
+
+  openssl req \
   -x509 \
   -newkey rsa:4096 \
-  -keyout server-key-excluded.pem \
-  -out server-cert-excluded.pem \
+  -keyout server-key-${suffix}.pem \
+  -out server-cert-${suffix}.pem \
   -subj '/CN=test' \
+  -addext "subjectAltName = DNS:test" \
   -nodes \
   -days 365000
+}
+
+gen_cert excluded
+gen_cert included
 ```

test/connector/http/generic/certs/server-cert-excluded.pem

@@ -1,27 +1,30 @@
 -----BEGIN CERTIFICATE-----
-MIIEnDCCAoQCCQCs+RL4gqtJNzANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0
-ZXN0MCAXDTIwMDQwMjEzNDMzNVoYDzMwMTkwODA0MTM0MzM1WjAPMQ0wCwYDVQQD
-DAR0ZXN0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA6ziQ8KwNyIkU
-esNg0OaSYKTjVRq/eE1Cfc7B/2cyCmh+yw2ZI/ExqB74YS+nmmLgwGwtiNutyN/h
-4f9En159pqLTJ0gxfJsXIcJ78WuzBrK1wMrG1uGZ8BEz3L2haPRqg23Egd7SrSIk
-0Qct9dn1QfnUAZsRYxdtKcwSaTTGLw3hJRt6lUPl28VT4jVoJRx8OK85x2JkDDxA
-hOT0DqS6mUt8rcIylMxtMgb1zEOCxRNX2bE6XHvofWFsI+oAi4Z9IBZyMb6ktLyG
-W9HcnTWFeDWa6lPmCzw5qNDNz8ulTyu2H4lPyIle7/E3XoZJKgHBzqCij6ImtSgI
-Rf6SZUKaWoQsE+1OLSHIRDm1RV/n4PRY3k/SDIwhHFKAfNb0AYGxkVBKY2A1k7SS
-gkJFH7ZX6FE3JOYSLjjP+IgIFcO9cmXUDGPJ6LCZ/RrmWO5+9sfuDKu7zDd0QhVJ
-gtU382GHoQWpmJJgqZlKTH/JSFh9HYbJ4tZjpwT7MQVoIvR94S0xfy1LZVTVfzgF
-Gh5DaTwxyVBjIIjaFEsqFuZePSgE2fhEEeEJdgZoaIEYKy/d080i8czd7WMLkG7c
-p1RoWCSyz6DgSG306NmQKSBgvuOJ/80zSbUB/kdVNbpVJFujequwqphIfdtV8ldI
-5nDtnLVbsMGSOX8U8sgzIGo3k+zj8ycCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEA
-0pTT1nsqCtUFXC/TXdYFr+PCoNOoGX/Js+ZVrUfolBPlbL65wDr0SM0owutRkcwx
-6aBPLDy2YLzKcuJ+Op0qWFI+qR4Dg1TH5CEDd63P4bUOvwrM+hBLIN5RGH7vIAgZ
-IFsVlGzBL07H/z6rxaC2/ZaDXxTUHHwowrxB1j3VSOtiMQzi4CPagsepcA/x+W67
-SCrMiaFYSdSkqphuZXaZbcOKW7B38rdp7hD5O/dbk5Ho9qBGO8oqoPh5cRbwbMps
-cx4WBG9yLDvD+uwnuVajJDm7AoU9Y+zJTGq5kXYu8BLanT2QzKLJOxN4NAW3tGD0
-hdnYvAhhE2LVDCcVgtdnm/slE8NSLxjSxgXx9bw3f6KxGHWEwBQlL3Aa/8qsPoAe
-Z7eJMTh3/wDzDf0nEOMW/axo/T9gxPZez0To4QzZ98S5ConwoJE8Lxx8t5KaTMwc
-qm6d/DtApcoJRrS57oahMJjn/YqB8aX17aCy8vQcee+ZfRb7dPK93FlTTx3kIJ1z
-0HCZD1+YgKLEfhvdk/fcBfBRXzlxgzDVLnQMQ7QYj8cp0Rr6MBwc/QHL5GLPzWHA
-nXsmE0EpDmOAdxY7R8jiiC5a3SqN4iucC7Y8b6zHvUwpNQEqYTsRlwWgmASGRxws
-kELI9dBvcuoUXkCGH4G7P97qIDbjpW1njH4dtduXq/A=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 -----END CERTIFICATE-----

test/connector/http/generic/certs/server-cert-included.pem

@@ -1,27 +1,30 @@
 -----BEGIN CERTIFICATE-----
-MIIEnDCCAoQCCQC5Mj7R6rRN6jANBgkqhkiG9w0BAQsFADAPMQ0wCwYDVQQDDAR0
-ZXN0MCAXDTIwMDQwMjEzNDMxOVoYDzMwMTkwODA0MTM0MzE5WjAPMQ0wCwYDVQQD
-DAR0ZXN0MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAs303IvOswLX7
-jmqpFtwZ4tm2D3g8DBQHOqAM5FJ/aIieMY1Y3lGNLCe+xydibhYQbItKyJM15P9q
-17ihuzIU32JI8NsPpNoeHX+gAoK0Ac0Yx94ar+kkokWPYD1Tq/5E/jolwbKoj57c
-of8PwhFzdn5p5avCQk2xMNWD4sNh6zjjOf/7E5iyiK4TZeVyJDrJMuaTXWM+U+Ws
-TWpDZsvMZ4jXSHgYM8KmYHNg6gn+Nlkc81+ttcgoE6CQUtlxWvdqZkuzkq2Ny9hr
-AExF/7C6LBgb8j8HKaMd9WPVqZlxinGMfbZiBVLCc9d8hOdFPoENAI6MCO5WLcwy
-6yTGzhtaLdgZ2tRL0z07RECWnIqYaLcuOHu9DirwpbGGTRrYLY3SNZIEvgP5gGoX
-JJOB0UM6BP7ApMcbdXejkSokuG3wZ11fxdewb//maqeMyuFUGfw03o0Pe15l6mAg
-4rY5D7JAC9kuZ+QeyX6YytFtZBGZmR06KxuJ58ZelF8ylz2fpPDSFpcP2haIfFCk
-40U+UC/tS6lf4R1tIfNd25ma/R6mERrR8411Jwm8nCF7YxgrbX1NDDkyM2ok+NY8
-5GVPhPirTWzIL/SDBGs/5lfB6YjV3nxgGyDQ7bAnp6M/hLPH2vKDosVB9Cubp6pf
-7X39zsj5ZzvgpSDwLKVNpW0KCzn3JaMCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEA
-Pg8WOg9By7u7x1aRn8IIEJjwQ6qkxycBuVPT1V9MQuI4u1Ai63n90W/C3UPdIWuh
-zXxopvg9OBM2ZZstNsOFdgKEJgkt63iribUiLoo+Jk9lapy8YNT5M7c2WmNRu+gP
-3etSUbBcjBLvubDex7Hve/4heyasMRNo46LnheKy7cGiLJJk/IY/Au5qPUVUWZh7
-A601O1Qs7fbl1lRL9VKTdEM16Fc1+dwe7KgG7lqwQYkm0uYIWZHPh69iDlsxTnDj
-eQNcG0zvy5uRsTXDRJECAQ12YYmT4ScqCOxaev7ZobHnI2Fis/RDulH6w3U/nafy
-xl1QtaCM35Xwd2qarhciZfDjgRLL/5H49eDVjW+TxyDG7wyiumepRuOGKCmfUUXy
-3El9TALMPp6Ns1h7fwect7X0XHpkAvU3s812+UmNHvN12D0eNPdxUc4Jqfc3N294
-r32UU7pezYchoVDut0xdLPNMPAluv3Lxqs0/ArsIyK0HYOAaRbel3Twnr+pDAj5p
-5K7XUzhY/ufK5CH2Ypu0uO5xkePxQanE2zXzvGPLENAd1XSLwcAZTXxoid4fm63C
-2VPhMvh/f/r3ojJPpenJFNPVEPtWE2AMga+I+NSMhP3y3XbkR3lvUy5mH3LuzVXJ
-/f8J0osZxqGz0G7dKbYLEaJANOngnEDpbFgVRt0njgM=
+MIIFEjCCAvqgAwIBAgIUMt6AkksdkZNAZTO+3ZIraZt/dFwwDQYJKoZIhvcNAQEL
+BQAwDzENMAsGA1UEAwwEdGVzdDAgFw0yMTAzMDQyMjI3MTFaGA8zMDIwMDcwNTIy
+MjcxMVowDzENMAsGA1UEAwwEdGVzdDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
+AgoCggIBALYcWWCMr23x7vARH47+Z1bUK5McmeeXqW0Hu30/KUKBglNKuCxuO83v
+pC3s+Cd2J3nxZej/j1gMspHj0xq3xGrGVAmgvnwDfCCUB6wm59oamHpJdab5PVF/
+OnFYX1KBuqUzDFcigf+bw2X0qASwm0jHSQ9Q7yMbraIWtx5BFpkHiec34mJg1D6m
+Chg7dd6Dxla/SEPddyKhWmxj8pHmeRtkbAW7f9hh2aZHyYCDralxcCt0nWBHIqgn
+SLwv9GYlEZYKlv5VkyMSWju/htG6esAFKNxUOSNz0F/JW3pwSPhOgN4Q/TR9S+N4
+WeIBFsEV1LxmGKOA+i6wuVZXLrGmHvefYVSOE8sRu8VpKr9GiNSN6WsQ7Nv/9TQv
+L6Kj/nygucaQjdZAeHuzadBtGGzfRnI7anSrgJLDqC4a1Fk74oVj6gUx2R0nAcj8
+MqNRa3vHlWhhMvMMTojSWP+lv130XHxCa/JEfax/ps68jd1F0ZJnztEKETVTjAQq
+HNuFzG4j9tmrL3aQ/MsmLx5rBbQrQQfzXy01XBouOEmsqlwiNehCs3eGDc8opPTw
+M0xt1zdf0Ey699Wr1ZN2c2XR4CM4PGsjMPGPVJ2cXuFAcKjG3Lo8O9HM+DaSBbpK
+Mfn9IDTxPJyM8zzWRWQTi9OiUuv6hMBrpl7fZI+NbOT6nA9ZJB9zAgMBAAGjZDBi
+MB0GA1UdDgQWBBQNKdfQs8c0bvsb48JJnHhs8WyyizAfBgNVHSMEGDAWgBQNKdfQ
+s8c0bvsb48JJnHhs8WyyizAPBgNVHRMBAf8EBTADAQH/MA8GA1UdEQQIMAaCBHRl
+c3QwDQYJKoZIhvcNAQELBQADggIBAD4YoX06CHaxkYScaZnktWa0KoEwemJYwNLC
+98ReexcOIO9bqQbHsLjzmuaVDheQ969nRiGEfv9IxurS8tR6mCeIjXiWjmWSZFZN
+SDEZKVtYNM3j+8FagnrKUjbirF43dMxTxOe3o7IlLiJ/YgWLRgeMthdA61W+q5vv
+jeGcKZVyMPSVH51polh2LhuO6jucUN+5Cb4KLqhD6krE0uodckk/zSliCV25fexl
+l6v4KYOG0DmkZ8OiENAtQfzVPLpk17HR629CWl+6eiROmv2NVu2RhzTKYoHCXNXR
+fewwcwhYD4uk2Or7QeXGmWenzCynrt97aIJA+0Once3NgNsRCqkXXCfcUgqubdd5
+LQGYfdj4i9Gn1DYJYi1TGdNUm+eKDpBra9mSYboN71Yx69a1i9rwvtsnJLZu8WGQ
+fzmoVPDejU3MWgUXIkyph4Bw3YvxzpDYT4qdQwRGzJ9VbkcOuw/UHKkoehTfEBnT
+6OLsn+/aUqmVi+iME1D2yBg3fqmQQuIOLMhjnfAvIsTYF8w3N8+jy7609yE8od7V
+58Ky8BpWMVYccuJGw3t3p/wf9joUq1RfSdxPH16I3Kr+WHR2rKiTrO83I+GmlWsj
+UjxGqz2eUVKxooQJGfi+irvvxM3b9G8fbskKx2BNXvDI48jwizGljv+nqERZoowV
+A6a8G+cS
 -----END CERTIFICATE-----