 JackDoan
|
5fa386bb70
test and stupid fix
|
vor 1 Jahr |
|
JackDoan
|
f488873d70
fixy fixy
|
vor 1 Jahr |
|
JackDoan
|
c073eebe42
fixy fixy
|
vor 1 Jahr |
|
JackDoan
|
1a1255d557
make tryRehandshake easier to understand
|
vor 1 Jahr |
|
JackDoan
|
32649de665
we accept mismatched handshakes now, no need to kill now-mismatched tunnels (this is fine as long as we don't let you change your set of vpnNetworks on reload)
|
vor 1 Jahr |
|
JackDoan
|
26a00a5647
reduce log spam
|
vor 1 Jahr |
|
JackDoan
|
888ba400b9
good idea
|
vor 1 Jahr |
|
JackDoan
|
dc3081ea49
nit
|
vor 1 Jahr |
|
JackDoan
|
68bbb53b90
fix comment
|
vor 1 Jahr |
|
JackDoan
|
41273a94bb
even spicier change to rehandshake if we detect our cert is lower-version than our peer, and we have a newer-version cert available
|
vor 1 Jahr |
|
JackDoan
|
0946831f88
very spicy change to respond to handshakes with cert versions we cannot match with a cert that we can indeed match
|
vor 1 Jahr |
|
JackDoan
|
d2d3e21780
squish bug from cert removals
|
vor 1 Jahr |
|
JackDoan
|
241b0a6d7f
don't wait forever
|
vor 1 Jahr |
|
JackDoan
|
0721dde24b
working e2e test?!
|
vor 1 Jahr |
|
JackDoan
|
a6640b4540
try to make certificate addition/removal reloadable in some cases
|
vor 1 Jahr |
 dependabot[bot]
|
071589f7c7
Bump actions/setup-go from 5 to 6 (#1469)
|
vor 1 Jahr |
|
Jack Doan
|
f1e992f6dd
don't require a detailsVpnAddr in a HostUpdateNotification (#1472)
|
vor 1 Jahr |
|
Jack Doan
|
1ea5f776d7
update to go 1.25, use the cool new ECDSA key marshalling functions (#1483)
|
vor 1 Jahr |
 Henry Graham
|
4cdeb284ef
Set CKA_VALUE_LEN attribute in DeriveNoise (#1482)
|
vor 1 Jahr |
|
Jack Doan
|
5cccd39465
update RemoteList.vpnAddrs when we complete a handshake (#1467)
|
vor 1 Jahr |
|
Jack Doan
|
8196c22b5a
store lighthouses as a slice (#1473)
|
vor 1 Jahr |
|
Jack Doan
|
65cc253c19
prevent linux from assigning ipv6 link-local addresses (#1476)
|
vor 1 Jahr |
 Wade Simmons
|
73cfa7b5b1
add firewall tests for ipv6 (#1451)
|
vor 1 Jahr |
|
Jack Doan
|
768325c9b4
cert-v2 chores (#1466)
|
vor 1 Jahr |
|
Jack Doan
|
932e329164
Don't delete static host mappings for non-primary IPs (#1464)
|
vor 1 Jahr |
|
Jack Doan
|
4bea299265
don't send recv errors for packets outside the connection window anymore (#1463)
|
vor 1 Jahr |
|
Wade Simmons
|
5cff83b282
netlink: ignore route updates with no destination (#1437)
|
vor 1 Jahr |
|
Wade Simmons
|
7da79685ff
fix lighthouse.calculated_remotes parsing (#1438)
|
vor 1 Jahr |
 brad-defined
|
91eff03418
Update slack OSS invite link (#1435)
|
vor 1 Jahr |
 Nate Brown
|
52623820c2
Drop inactive tunnels (#1427)
|
vor 1 Jahr |
