3 Commits (1a94c309ea1a09d9d41d0bfea7fa368bcda0dd2e)

Author	SHA1	Message	Date
Tom DNetto	7ca17b6bdb	tka: validate key after UpdateKey before applying state ... Signed-off-by: Tom DNetto <tom@tailscale.com>	4 years ago
Tom DNetto	f580f4484f	tka: move disablement logic out-of-band from AUMs ... It doesn't make a ton of sense for disablement to be communicated as an AUM, because any failure in the AUM or chain mechanism will mean disablement wont function. Instead, tracking of the disablement secrets remains inside the state machine, but actual disablement and communication of the disablement secret is done by the caller. Signed-off-by: Tom DNetto <tom@tailscale.com>	4 years ago
Tom DNetto	3709074e55	tka: implement State and applying AUMs ... Signed-off-by: Tom DNetto <tom@tailscale.com>	4 years ago