 Wade Simmons
|
992e36b678
v1.11.1 (#1854)
|
hace 2 meses |
 Nate Brown
|
5d7c8c905b
release: retry the STS assume until the secret key survives Windows (#1856)
|
hace 2 meses |
|
Wade Simmons
|
c2ad75e459
cmd/ca: prevent out-of-memory on 32bit systems (#1834) (#1852)
|
hace 2 meses |
|
Wade Simmons
|
0a916b1d4b
parseV6: only walk real ipv6 extension headers, fail closed on unknown protocols (#1840) (#1853)
|
hace 2 meses |
|
Wade Simmons
|
33abaf95cd
Enforce outbound message counter limits to prevent nonce reuse (#1841) (#1850)
|
hace 2 meses |
|
Wade Simmons
|
20c68ef3c4
Drop dependency on github.com/cyberdelia/go-metrics-graphite (#1832) (#1849)
|
hace 2 meses |
|
Wade Simmons
|
f46abae87e
Take Apple signing credentials from Secrets Manager (#1833) (#1848)
|
hace 2 meses |
|
Wade Simmons
|
ae688d038d
Tolerate ErrDumpInterrupted when listing tun addresses (#1842)
|
hace 2 meses |
|
Nate Brown
|
1617897043
v1.11.0 changelog (#1792)
|
hace 2 meses |
|
Nate Brown
|
f8775bb6ca
Use go 1.26 (latest 1.26.5) (#1818)
|
hace 2 meses |
|
Nate Brown
|
15f0f0d5d0
Be less verbose with handshake send errors (#1810)
|
hace 2 meses |
|
Nate Brown
|
7902ce674e
Rebind for MacOS (#1816)
|
hace 2 meses |
|
Nate Brown
|
c2fbe215e6
Fix a test race, make dns server reload/restart safer (#1815)
|
hace 3 meses |
 dependabot[bot]
|
94ac6db4ca
Bump the golang-x-dependencies group across 1 directory with 5 updates (#1800)
|
hace 3 meses |
|
dependabot[bot]
|
a60350e34e
Bump actions/setup-go from 6 to 7 (#1807)
|
hace 3 meses |
 John Maguire
|
58f3b6fda7
Document rootless Nebula in example service script (#1814)
|
hace 3 meses |
 Jack Doan
|
a99699e370
before removing a pending hostinfo in handshake_manager, make sure it's the one we wanted to delete (#1811)
|
hace 3 meses |
|
Jack Doan
|
3615a79b8b
add locks around replay window updates (#1802)
|
hace 3 meses |
|
Nate Brown
|
147c202c27
Swap back to a blocking udp socket, test `shutdown(2)` (#1806)
|
hace 3 meses |
|
John Maguire
|
e290a6892f
Fix relay re-establishment for handshake on Disestablised entry (#1805)
|
hace 3 meses |
|
Nate Brown
|
6c3972f464
code-sign: default the S3 key-prefix to the calling repo (#1799)
|
hace 3 meses |
|
Jack Doan
|
861d3aabd7
correct directionality of firewall.inbound_action and firewall.outbound_action (#1798)
|
hace 3 meses |
|
Jack Doan
|
86733864fe
don't make new relay state on a just-discarded tunnel (#1796)
|
hace 3 meses |
|
Nate Brown
|
ab736e4c6b
Make Control safe to stop and wait on from any lifecycle state (#1794)
|
hace 3 meses |
|
Nate Brown
|
5ecdd4eaa9
Fix e2e test races when looking at hostmap counts (#1795)
|
hace 3 meses |
|
Nate Brown
|
1b84bd0050
Remove dev fmt.Println (#1793)
|
hace 3 meses |
|
Nate Brown
|
384610f81a
hostmap: replace the shared next/prev hostinfo chain with independent per-address lists so divergent or overlapping vpnAddr sets cannot corrupt the map (#1790)
|
hace 3 meses |
|
Nate Brown
|
c1eea118f4
fix firewall port/proto bypass in parseV6 from uint8 extension-header length overflow (#1789)
|
hace 3 meses |
|
Nate Brown
|
1e66c0d3ee
hostmap: unlink a multi-vpnAddr hostinfo from the shared chain exactly once on delete (#1788)
|
hace 3 meses |
|
Nate Brown
|
e5c0fdad8d
Darwin and openbsd in line with the other bsds for tun support (#1703)
|
hace 3 meses |
