John Maguire
|
5bf666dd90
Treat uppercase blocked fingerprints the same as lowercase (#1964)
|
il y a 4 jours |
Nate Brown
|
915495d5f4
Fail the reload on a startup only value that would fail a restart, and stop asking for tun.dev restarts that change nothing (#1953)
|
il y a 4 jours |
Nate Brown
|
1a0ac25db0
Report how a config reload went: failures, restarts required, and the keys that need one (#1935)
|
il y a 5 jours |
Wade Simmons
|
9c5d701648
Support native Golang "fips140" mode (#1696)
|
il y a 1 mois |
Nate Brown
|
5f920fdd7d
Remove the global noiseEndianness var (#1707)
|
il y a 5 mois |
Nate Brown
|
9ec8cf10f3
Handshake state machine (#1656)
|
il y a 5 mois |
Nate Brown
|
d0f02ba873
Switch to slog, remove logrus (#1672)
|
il y a 5 mois |
John Maguire
|
0ad5c771e9
Refactor CA pool handling to use streaming (#1644)
|
il y a 6 mois |
Nate Brown
|
52f1908126
Don't log every blocklisted fingerprint (#1525)
|
il y a 11 mois |
Jack Doan
|
01909f4715
try to make certificate addition/removal reloadable in some cases (#1468)
|
il y a 11 mois |
Jack Doan
|
768325c9b4
cert-v2 chores (#1466)
|
il y a 1 an |
Wade Simmons
|
b8ea55eb90
optimize usage of bart (#1395)
|
il y a 1 an |
John Maguire
|
d4a7df3083
Rename pki.default_version to pki.initiating_version (#1381)
|
il y a 1 an |
Nate Brown
|
d97ed57a19
V2 certificate format (#1216)
|
il y a 1 an |
Nate Brown
|
08ac65362e
Cert interface (#1212)
|
il y a 2 ans |
Jack Doan
|
35603d1c39
add PKCS11 support (#1153)
|
il y a 2 ans |
Nate Brown
|
e264a0ff88
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
il y a 2 ans |
Nate Brown
|
5a131b2975
Combine ca, cert, and key handling (#952)
|
il y a 3 ans |