 JackDoan
|
bd82089a3f
Clock cached msg2 resends per path in the fragment table, so a copy of msg1 arriving by a relay or a second address is answered even when the direct path only works one way
|
6 дней назад |
|
JackDoan
|
dff5c51dd6
Make post-quantum handshakes hybrid only: drop ix_psk2_mlkem1024, need a v3 certificate, and leave a classical msg1 crossing a hybrid one unanswered
|
6 дней назад |
|
JackDoan
|
656164b259
cert: Name the post-quantum algorithms of a version 3 certificate with a PQSuite, like its curve, and pick the hybrid subtype by the suite's KEM
|
6 дней назад |
|
JackDoan
|
bbade4dc9a
Take a hybrid tunnel on msg3 even over a newer one, the initiator has committed to it
|
6 дней назад |
|
JackDoan
|
70e7d3f2ea
Hold a pending hybrid responder locked until it is filled in
|
6 дней назад |
|
JackDoan
|
b26c1e9c3e
Run hybrid handshakes: v3 holders initiate them, responders wait for msg3, initiators resend it until confirmed
|
6 дней назад |
|
JackDoan
|
13658b74a0
Add handshakes.pq.require, and give new paths and responsive peers the PQ attempt
|
6 дней назад |
|
JackDoan
|
22cdb0739a
Demand cookies for post-quantum msg1s while under load, and reload handshakes.pq settings
|
6 дней назад |
|
JackDoan
|
a36ce25af4
Speak post-quantum handshakes over fragments, alternating with classical until one answers
|
6 дней назад |
 Matt Richardson
|
f9b0853476
Attach a pending handshake's RemoteList when the handshake starts (#1909)
|
1 неделя назад |
|
Jack Doan
|
edc3c5e018
the definitive tun offloads branch (#1704)
|
2 месяцев назад |
 Nate Brown
|
f15d10fc54
Enforce outbound message counter limits to prevent nonce reuse (#1841)
|
2 месяцев назад |
|
Nate Brown
|
15f0f0d5d0
Be less verbose with handshake send errors (#1810)
|
2 месяцев назад |
|
Jack Doan
|
a99699e370
before removing a pending hostinfo in handshake_manager, make sure it's the one we wanted to delete (#1811)
|
3 месяцев назад |
 John Maguire
|
e290a6892f
Fix relay re-establishment for handshake on Disestablised entry (#1805)
|
3 месяцев назад |
|
Nate Brown
|
384610f81a
hostmap: replace the shared next/prev hostinfo chain with independent per-address lists so divergent or overlapping vpnAddr sets cannot corrupt the map (#1790)
|
3 месяцев назад |
|
Jack Doan
|
2e9117da5b
fix tunnels that could permanently escape connection-manager monitoring (#1752)
|
4 месяцев назад |
|
Nate Brown
|
3a95495c63
Fix duplicate log fields which slog duplicates (#1734)
|
5 месяцев назад |
|
Nate Brown
|
873f94f465
Reduce relay log spam (#1733)
|
5 месяцев назад |
|
Nate Brown
|
33c2d7277c
Reduce HandshakeManager complexity a little bit (#1701)
|
5 месяцев назад |
|
Nate Brown
|
9ec8cf10f3
Handshake state machine (#1656)
|
5 месяцев назад |
|
Nate Brown
|
d0f02ba873
Switch to slog, remove logrus (#1672)
|
5 месяцев назад |
 Wade Simmons
|
422fc2ad1e
go fix (#1608)
|
8 месяцев назад |
|
Nate Brown
|
56067afca2
Stab at better logging when a relay is being used (#1533)
|
10 месяцев назад |
|
Jack Doan
|
a89f95182c
Firewall types and cross-stack subnet stuff (#1509)
|
11 месяцев назад |
|
Jack Doan
|
01909f4715
try to make certificate addition/removal reloadable in some cases (#1468)
|
11 месяцев назад |
 brad-defined
|
b158eb0c4c
Use a list for relay IPs instead of a map (#1423)
|
1 год назад |
|
Wade Simmons
|
b8ea55eb90
optimize usage of bart (#1395)
|
1 год назад |
|
Nate Brown
|
f8734ffa43
Improve logging when handshaking with an invalid cert (#1345)
|
1 год назад |
|
Nate Brown
|
d97ed57a19
V2 certificate format (#1216)
|
1 год назад |
