mTLS

fastly/custom_tls_activation.go

@@ -160,6 +160,7 @@ func (c *Client) CreateTLSActivation(i *CreateTLSActivationInput) (*TLSActivatio
 	if err != nil {
 		return nil, err
 	}
+	defer r.Body.Close()
 
 	var a TLSActivation
 	if err := jsonapi.UnmarshalPayload(r.Body, &a); err != nil {
@@ -175,6 +176,8 @@ type UpdateTLSActivationInput struct {
 	Certificate *CustomTLSCertificate `jsonapi:"relation,tls_certificate"` // Only ID of CustomTLSCertificate needs to be set.
 	// ID is an aphanumeric string identifying a TLS activation.
 	ID string `jsonapi:"primary,tls_activation"`
+	// MutualAuthentication is an alphanumeric string identifying a mutual authentication.
+	MutualAuthentication *TLSMutualAuthentication `jsonapi:"relation,mutual_authentication"` // Only ID of TLSMutualAuthentication needs to be set.
 }
 
 // UpdateTLSActivation updates the specified resource.

fastly/errors.go

@@ -85,6 +85,10 @@ var ErrMissingBackend = NewFieldError("Backend")
 // requires a "CertBlob" key, but one was not set.
 var ErrMissingCertBlob = NewFieldError("CertBlob")
 
+// ErrMissingCertBundle is an error that is returned when an input struct
+// requires a "CertBundle" key, but one was not set.
+var ErrMissingCertBundle = NewFieldError("CertBundle")
+
 // ErrMissingContent is an error that is returned when an input struct
 // requires a "Content" key, but one was not set.
 var ErrMissingContent = NewFieldError("Content")

fastly/fixtures/mutual_authentication/create-cert.yaml

@@ -0,0 +1,49 @@
+---
+version: 1
+interactions:
+- request:
+    body: |
+      {"data":{"type":"tls_certificate","attributes":{"cert_blob":"-----BEGIN CERTIFICATE-----\nMIIDWTCCAkGgAwIBAgIITWWCIQf8/VIwDQYJKoZIhvcNAQELBQAwNDEUMBIGA1UE\nAxMLZXhhbXBsZS5jb20xHDAaBgNVBAUTEzU1NzcwMDY3OTE5NDc3Nzk0MTAwHhcN\nMjMwNTMwMTYzMDA4WhcNMjMwODI4MTYzMDA4WjA0MRQwEgYDVQQDEwtleGFtcGxl\nLmNvbTEcMBoGA1UEBRMTNTU3NzAwNjc5MTk0Nzc3OTQxMDCCASIwDQYJKoZIhvcN\nAQEBBQADggEPADCCAQoCggEBANDbXwKqKOjntzRrxZU4xkZB+Pr6K8wexMdzBlCA\nIncZ7E1WBdhu4oYcJN0DDDu+aLis8UQ5GeeZgGcAZ2keO5RGnXRZXP1eng38GBDl\nRTzcmVLq82370c9D+ZjNOQbH420FJ5Ojw5QNgGlz62sW4be+8G46SX/66W8xr5nL\n20u03evQAD/puMqNxTeGikXyJDVgPNChkWWxVNW5/PuyUUXO8mlgANHhcWI4v3Fx\nyM9THd9v0nBD0vTK2Ey1WkWU090nE1k6szrLe1uWZ5w61aubekLM+qI0Eb6A0MaC\nfK3SzjEXmLF0mcPl/rRPzA5SZAR4cnnP2FI1RgOkkVk/UMkCAwEAAaNvMG0wDgYD\nVR0PAQH/BAQDAgIEMBMGA1UdJQQMMAoGCCsGAQUFBwMBMA8GA1UdEwEB/wQFMAMB\nAf8wHQYDVR0OBBYEFDauwDsA5D49yAN5LOtvNx6OfubtMBYGA1UdEQQPMA2CC2V4\nYW1wbGUuY29tMA0GCSqGSIb3DQEBCwUAA4IBAQCqFOQTRc9HbdGPst1x7elxp8vU\nKjmeQoh4Gv/y6cILOT6lSNwrGBSltI057uIvARgsxCeCt2X7T/axozrMG/RxPOyJ\nktDx8RG27P3264rvkC80m4sx5KoOirOyQXOy/V7Q4vub3N6Wy94i8aO7vTVKJIOZ\ny8StXdwKBv9HHN04pU0+poS9i8X4mhozOAXnxpqxudyXJiq9ilOTVjmweaA8Hsfq\nj4IZwfr84TiWGGlCR4V6J+l/dbh63xUwMKLVDIouwX5fGhuJeo445kAwZwwVmt6Y\nQZEEiZcK5CE3l00u4NFIMDZkAPh1g6mlal2Dntnlj24BqDXJffv93qCsBGX7\n-----END CERTIFICATE-----","name":"My custom certificate"}}}
+    form: {}
+    headers:
+      Accept:
+      - application/vnd.api+json
+      Content-Type:
+      - application/vnd.api+json
+      User-Agent:
+      - FastlyGo/8.3.0 (+github.com/fastly/go-fastly; go1.18.5)
+    url: https://api.fastly.com/tls/certificates
+    method: POST
+  response:
+    body: '{"data":{"id":"X5RA1xMENhYI8pzA20ocn2","type":"tls_certificate","attributes":{"created_at":"2023-05-30T16:30:09.000Z","issued_to":"example.com","issuer":"example.com","name":"My
+      custom certificate","not_after":"2023-08-28T16:30:08.000Z","not_before":"2023-05-30T16:30:08.000Z","replace":false,"serial_number":"5577006791947779410","signature_algorithm":"SHA256-RSA","updated_at":"2023-05-30T16:30:09.000Z"},"relationships":{"tls_domains":{"data":[{"id":"example.com","type":"tls_domain"}]}}}}'
+    headers:
+      Accept-Ranges:
+      - bytes
+      Cache-Control:
+      - private
+      Content-Length:
+      - "492"
+      Content-Type:
+      - application/vnd.api+json
+      Date:
+      - Tue, 30 May 2023 16:30:10 GMT
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=31536000
+      Via:
+      - 1.1 varnish, 1.1 varnish
+      X-Cache:
+      - MISS, MISS
+      X-Cache-Hits:
+      - 0, 0
+      X-Content-Type-Options:
+      - nosniff
+      X-Served-By:
+      - cache-control-cp-aws-us-east-2-prod-5-CONTROL-AWS-UE2, cache-lhr7360-LHR
+      X-Timer:
+      - S1685464209.486002,VS0,VE826
+    status: 201 Created
+    code: 201
+    duration: ""

fastly/fixtures/mutual_authentication/create-key.yaml

@@ -0,0 +1,49 @@
+---
+version: 1
+interactions:
+- request:
+    body: |
+      {"data":{"type":"","attributes":{"key":"-----BEGIN PRIVATE KEY-----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\nu36H3395QJNx3OqpYvVrIKzL\n-----END PRIVATE KEY-----","name":"My private key"}}}
+    form: {}
+    headers:
+      Accept:
+      - application/vnd.api+json
+      Content-Type:
+      - application/vnd.api+json
+      User-Agent:
+      - FastlyGo/8.3.0 (+github.com/fastly/go-fastly; go1.18.5)
+    url: https://api.fastly.com/tls/private_keys
+    method: POST
+  response:
+    body: '{"data":{"id":"pCcAcTLFGz8qbKirYl8VV2","type":"tls_private_key","attributes":{"key_length":2048,"key_type":"RSA","name":"My
+      private key","created_at":null,"replace":false,"public_key_sha1":"92d8b726c475a135865da27b3e34d859875bda64"}}}'
+    headers:
+      Accept-Ranges:
+      - bytes
+      Cache-Control:
+      - private
+      Content-Length:
+      - "234"
+      Content-Type:
+      - application/vnd.api+json
+      Date:
+      - Tue, 30 May 2023 16:30:09 GMT
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=31536000
+      Via:
+      - 1.1 varnish, 1.1 varnish
+      X-Cache:
+      - MISS, MISS
+      X-Cache-Hits:
+      - 0, 0
+      X-Content-Type-Options:
+      - nosniff
+      X-Served-By:
+      - cache-control-cp-aws-us-east-2-prod-7-CONTROL-AWS-UE2, cache-lhr7360-LHR
+      X-Timer:
+      - S1685464209.067484,VS0,VE395
+    status: 201 Created
+    code: 201
+    duration: ""

fastly/fixtures/mutual_authentication/create-tma.yaml

@@ -0,0 +1,49 @@
+---
+version: 1
+interactions:
+- request:
+    body: |
+      {"data":{"type":"mutual_authentication","attributes":{"cert_bundle":"-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----","name":"My mutual authentication"}}}
+    form: {}
+    headers:
+      Accept:
+      - application/vnd.api+json
+      Content-Type:
+      - application/vnd.api+json
+      User-Agent:
+      - FastlyGo/8.3.0 (+github.com/fastly/go-fastly; go1.18.5)
+    url: https://api.fastly.com/tls/mutual_authentications
+    method: POST
+  response:
+    body: '{"data":{"id":"ighDXgQbj0EH8utWHwfzn5","type":"mutual_authentication","attributes":{"created_at":"2023-05-30T16:30:10.000Z","enforced":true,"name":"My
+      mutual authentication","updated_at":"2023-05-30T16:30:10.000Z"},"relationships":{"tls_activations":{"data":[]}}}}'
+    headers:
+      Accept-Ranges:
+      - bytes
+      Cache-Control:
+      - private
+      Content-Length:
+      - "264"
+      Content-Type:
+      - application/vnd.api+json
+      Date:
+      - Tue, 30 May 2023 16:30:10 GMT
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=31536000
+      Via:
+      - 1.1 varnish, 1.1 varnish
+      X-Cache:
+      - MISS, MISS
+      X-Cache-Hits:
+      - 0, 0
+      X-Content-Type-Options:
+      - nosniff
+      X-Served-By:
+      - cache-control-cp-aws-us-east-2-prod-5-CONTROL-AWS-UE2, cache-lhr7360-LHR
+      X-Timer:
+      - S1685464210.334028,VS0,VE195
+    status: 201 Created
+    code: 201
+    duration: ""

fastly/fixtures/mutual_authentication/delete-cert.yaml

@@ -0,0 +1,39 @@
+---
+version: 1
+interactions:
+- request:
+    body: ""
+    form: {}
+    headers:
+      User-Agent:
+      - FastlyGo/8.3.0 (+github.com/fastly/go-fastly; go1.18.5)
+    url: https://api.fastly.com/tls/certificates/X5RA1xMENhYI8pzA20ocn2
+    method: DELETE
+  response:
+    body: ""
+    headers:
+      Accept-Ranges:
+      - bytes
+      Cache-Control:
+      - private
+      Date:
+      - Tue, 30 May 2023 16:30:11 GMT
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=31536000
+      Via:
+      - 1.1 varnish, 1.1 varnish
+      X-Cache:
+      - MISS, MISS
+      X-Cache-Hits:
+      - 0, 0
+      X-Content-Type-Options:
+      - nosniff
+      X-Served-By:
+      - cache-control-cp-aws-us-east-2-prod-5-CONTROL-AWS-UE2, cache-lhr7360-LHR
+      X-Timer:
+      - S1685464212.516262,VS0,VE289
+    status: 204 No Content
+    code: 204
+    duration: ""

fastly/fixtures/mutual_authentication/delete-key.yaml

@@ -0,0 +1,39 @@
+---
+version: 1
+interactions:
+- request:
+    body: ""
+    form: {}
+    headers:
+      User-Agent:
+      - FastlyGo/8.3.0 (+github.com/fastly/go-fastly; go1.18.5)
+    url: https://api.fastly.com/tls/private_keys/pCcAcTLFGz8qbKirYl8VV2
+    method: DELETE
+  response:
+    body: ""
+    headers:
+      Accept-Ranges:
+      - bytes
+      Cache-Control:
+      - private
+      Date:
+      - Tue, 30 May 2023 16:30:11 GMT
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=31536000
+      Via:
+      - 1.1 varnish, 1.1 varnish
+      X-Cache:
+      - MISS, MISS
+      X-Cache-Hits:
+      - 0, 0
+      X-Content-Type-Options:
+      - nosniff
+      X-Served-By:
+      - cache-control-cp-aws-us-east-2-prod-4-CONTROL-AWS-UE2, cache-lhr7360-LHR
+      X-Timer:
+      - S1685464212.827593,VS0,VE161
+    status: 204 No Content
+    code: 204
+    duration: ""

fastly/fixtures/mutual_authentication/delete-tma.yaml

@@ -0,0 +1,39 @@
+---
+version: 1
+interactions:
+- request:
+    body: ""
+    form: {}
+    headers:
+      User-Agent:
+      - FastlyGo/8.3.0 (+github.com/fastly/go-fastly; go1.18.5)
+    url: https://api.fastly.com/tls/mutual_authentications/ighDXgQbj0EH8utWHwfzn5
+    method: DELETE
+  response:
+    body: ""
+    headers:
+      Accept-Ranges:
+      - bytes
+      Cache-Control:
+      - private
+      Date:
+      - Tue, 30 May 2023 16:30:11 GMT
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=31536000
+      Via:
+      - 1.1 varnish, 1.1 varnish
+      X-Cache:
+      - MISS, MISS
+      X-Cache-Hits:
+      - 0, 0
+      X-Content-Type-Options:
+      - nosniff
+      X-Served-By:
+      - cache-control-cp-aws-us-east-2-prod-5-CONTROL-AWS-UE2, cache-lhr7360-LHR
+      X-Timer:
+      - S1685464211.229053,VS0,VE265
+    status: 204 No Content
+    code: 204
+    duration: ""

fastly/fixtures/mutual_authentication/get.yaml

@@ -0,0 +1,46 @@
+---
+version: 1
+interactions:
+- request:
+    body: ""
+    form: {}
+    headers:
+      User-Agent:
+      - FastlyGo/8.3.0 (+github.com/fastly/go-fastly; go1.18.5)
+    url: https://api.fastly.com/tls/mutual_authentications/ighDXgQbj0EH8utWHwfzn5
+    method: GET
+  response:
+    body: '{"data":{"id":"ighDXgQbj0EH8utWHwfzn5","type":"mutual_authentication","attributes":{"created_at":"2023-05-30T16:30:10.000Z","enforced":true,"name":"My
+      mutual authentication","updated_at":"2023-05-30T16:30:10.000Z"},"relationships":{"tls_activations":{"data":[]}}}}'
+    headers:
+      Accept-Ranges:
+      - bytes
+      Cache-Control:
+      - private
+      Content-Length:
+      - "264"
+      Content-Type:
+      - application/vnd.api+json
+      Date:
+      - Tue, 30 May 2023 16:30:10 GMT
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=31536000
+      Vary:
+      - Accept-Encoding
+      Via:
+      - 1.1 varnish, 1.1 varnish
+      X-Cache:
+      - MISS, MISS
+      X-Cache-Hits:
+      - 0, 0
+      X-Content-Type-Options:
+      - nosniff
+      X-Served-By:
+      - cache-control-cp-aws-us-east-2-prod-5-CONTROL-AWS-UE2, cache-lhr7360-LHR
+      X-Timer:
+      - S1685464211.775420,VS0,VE152
+    status: 200 OK
+    code: 200
+    duration: ""

fastly/fixtures/mutual_authentication/list.yaml

@@ -0,0 +1,48 @@
+---
+version: 1
+interactions:
+- request:
+    body: ""
+    form: {}
+    headers:
+      Accept:
+      - application/vnd.api+json
+      User-Agent:
+      - FastlyGo/8.3.0 (+github.com/fastly/go-fastly; go1.18.5)
+    url: https://api.fastly.com/tls/mutual_authentications
+    method: GET
+  response:
+    body: '{"data":[{"id":"ighDXgQbj0EH8utWHwfzn5","type":"mutual_authentication","attributes":{"created_at":"2023-05-30T16:30:10.000Z","enforced":true,"name":"My
+      mutual authentication","updated_at":"2023-05-30T16:30:10.000Z"},"relationships":{"tls_activations":{"data":[]}}}],"links":{"self":"https://api.fastly.com/tls/mutual_authentications?page%5Bnumber%5D=1\u0026page%5Bsize%5D=100","first":"https://api.fastly.com/tls/mutual_authentications?page%5Bnumber%5D=1\u0026page%5Bsize%5D=100","prev":null,"next":null,"last":"https://api.fastly.com/tls/mutual_authentications?page%5Bnumber%5D=1\u0026page%5Bsize%5D=100"},"meta":{"per_page":100,"current_page":1,"record_count":1,"total_pages":1}}'
+    headers:
+      Accept-Ranges:
+      - bytes
+      Cache-Control:
+      - private
+      Content-Length:
+      - "681"
+      Content-Type:
+      - application/vnd.api+json
+      Date:
+      - Tue, 30 May 2023 16:30:10 GMT
+      Pragma:
+      - no-cache
+      Strict-Transport-Security:
+      - max-age=31536000
+      Vary:
+      - Accept-Encoding
+      Via:
+      - 1.1 varnish, 1.1 varnish
+      X-Cache:
+      - MISS, MISS
+      X-Cache-Hits:
+      - 0, 0
+      X-Content-Type-Options:
+      - nosniff
+      X-Served-By:
+      - cache-control-cp-aws-us-east-2-prod-7-CONTROL-AWS-UE2, cache-lhr7360-LHR
+      X-Timer:
+      - S1685464211.568441,VS0,VE164
+    status: 200 OK
+    code: 200
+    duration: ""