cisco-open/camblet-driver

Issues

• bearssl low_write error codes should be also propagated to upper levels as low_read

  #212 opened 4 months ago by bonifaido
  0

• Create a kTLS passthrough and other tests

  #92 opened 3 months ago by bonifaido
  2

• Create a reusable test framework for testing the kernel module (bats-core?)

  #52 opened a year ago by bonifaido
  0

• tests: create get/setsockopt test cases

  #210 opened 3 months ago by bonifaido
  1

• Organize source files into a source directory

  #201 opened 4 months ago by bonifaido
  0

• wget doesn't seem to work with BearSSL if using mTLS

  #179 opened 4 months ago by bonifaido
  0

• Use camblet poll in case of accept as well.

  #208 opened 4 months ago by baluchicken
  0

• tests: create ipv6 version of some tests

  #206 opened 4 months ago by bonifaido
  0

• Memory allocation failures need to be handled in this project

  #198 opened 4 months ago by Solumnant
  0

• Support more ciphers with kTLS

  #150 opened 4 months ago by baluchicken
  1

• kTLS: deal with control messages

  #60 opened 10 months ago by bonifaido
  2

• Support selector based policy templating

  #162 opened 4 months ago by baluchicken
  0

• [BUG] Bigfile test fails on kernel 5.15 with br_sslio_read error # command[curl] err[3]

  #186 opened 5 months ago by bonifaido
  0

• ECDSA support

  #185 opened 5 months ago by waynz0r
  0

• Move workload cert signing into the kernel

  #184 opened 5 months ago by waynz0r
  0

• TLS: implement sendpage also in non-kTLS connections (only kernel < 6.5)

  #56 opened 5 months ago by bonifaido
  0

• Load distribution CA bundles

  #168 opened 5 months ago by bonifaido
  0

• Support Spiffe JWT-SVID

  #163 opened 5 months ago by baluchicken
  0

• socket: implement connection table attestation matrix

  #28 opened 5 months ago by bonifaido
  0

• Mac OS Support

  #166 opened 5 months ago by baluchicken
  0

• Spiffe TLS federation

  #165 opened 5 months ago by baluchicken
  0

• Develop a generic build platform

  #164 opened 5 months ago by baluchicken
  0

• Implement HTTP level support

  #40 opened a year ago by bonifaido
  1

• Gather useful information using socket option

  #152 opened 5 months ago by baluchicken
  1

• TLS passthrough feature

  #79 opened 5 months ago by bonifaido
  1

• Run driver in Google Cloud with Container-Optimized image

  #160 opened 5 months ago by baluchicken
  0

• Compile Driver using Clang

  #159 opened 5 months ago by baluchicken
  0

• Can Secure Enclave be leveraged

  #154 opened 6 months ago by baluchicken
  0

• Can Unix Domain Socket leveraged for agent communication.

  #153 opened 6 months ago by baluchicken
  0

• Migrate bearSSL to WolfSSL

  #151 opened 6 months ago by baluchicken
  0

• Permissive and optional (configurable) TLS

  #41 opened a year ago by bonifaido
  0

• [install] create debian package

  #69 opened 6 months ago by bonifaido
  1

• [BUG] index 2 is out of range for type (on kernel 6.5) and freeze

  #125 opened 7 months ago by bonifaido
  0

• Implement certificate caching

  #72 opened 9 months ago by baluchicken
  1

• tls cert issuance from agent with self signed ca

  #45 opened 10 months ago by waynz0r
  1

• distribution: Kernel module portability issue - DKMS ?

  #23 opened 10 months ago by bonifaido
  1

• investigate how can we extract the remote cert for validation

  #47 opened 10 months ago by waynz0r
  0

• CI: use self hosted runners to be able to run and test on certain kernel versions (matrix build)

  #68 opened 10 months ago by bonifaido
  0

• capture TLS certificates with BearSSL for further validation

  #43 opened 10 months ago by bonifaido
  1

• decouple TLS and proxywasm in socket interception

  #58 opened 10 months ago by bonifaido
  0

• examine migration to kTLS

  #39 opened 10 months ago by bonifaido
  1

• cover IPv6 as well with socket interception

  #51 opened 10 months ago by bonifaido
  0

• Allow to add additional csr parameters to the csr gen module

  #53 opened 10 months ago by baluchicken
  1

• [BUG] kTLS sendfile can't be received on client side

  #54 opened 10 months ago by bonifaido
  0

• proxy-wasm: implement filter Continue/Pause

  #26 opened a year ago by bonifaido
  0

• support wasm module unload in general

  #46 opened a year ago by waynz0r
  0

• support multiple opa wasm module load/unload

  #44 opened a year ago by waynz0r
  0

• agent: how should agent authentication be implemented?

  #27 opened a year ago by bonifaido
  0

• Do eBPF programming restrictions still apply?

  #2 opened a year ago by manuschillerdev
  2