John Maguire
|
5bf666dd90
Treat uppercase blocked fingerprints the same as lowercase (#1964)
|
3 dni temu |
Nate Brown
|
915495d5f4
Fail the reload on a startup only value that would fail a restart, and stop asking for tun.dev restarts that change nothing (#1953)
|
4 dni temu |
Nate Brown
|
1a0ac25db0
Report how a config reload went: failures, restarts required, and the keys that need one (#1935)
|
4 dni temu |
Wade Simmons
|
9c5d701648
Support native Golang "fips140" mode (#1696)
|
1 miesiąc temu |
Nate Brown
|
5f920fdd7d
Remove the global noiseEndianness var (#1707)
|
5 miesięcy temu |
Nate Brown
|
9ec8cf10f3
Handshake state machine (#1656)
|
5 miesięcy temu |
Nate Brown
|
d0f02ba873
Switch to slog, remove logrus (#1672)
|
5 miesięcy temu |
John Maguire
|
0ad5c771e9
Refactor CA pool handling to use streaming (#1644)
|
6 miesięcy temu |
Nate Brown
|
52f1908126
Don't log every blocklisted fingerprint (#1525)
|
11 miesięcy temu |
Jack Doan
|
01909f4715
try to make certificate addition/removal reloadable in some cases (#1468)
|
11 miesięcy temu |
Jack Doan
|
768325c9b4
cert-v2 chores (#1466)
|
1 rok temu |
Wade Simmons
|
b8ea55eb90
optimize usage of bart (#1395)
|
1 rok temu |
John Maguire
|
d4a7df3083
Rename pki.default_version to pki.initiating_version (#1381)
|
1 rok temu |
Nate Brown
|
d97ed57a19
V2 certificate format (#1216)
|
1 rok temu |
Nate Brown
|
08ac65362e
Cert interface (#1212)
|
2 lat temu |
Jack Doan
|
35603d1c39
add PKCS11 support (#1153)
|
2 lat temu |
Nate Brown
|
e264a0ff88
Switch most everything to netip in prep for ipv6 in the overlay (#1173)
|
2 lat temu |
Nate Brown
|
5a131b2975
Combine ca, cert, and key handling (#952)
|
3 lat temu |