You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Adrian Dewhurst 04dd6d1dae control/controlclient: sign RegisterRequest (#1549) ... control/controlclient: sign RegisterRequest Some customers wish to verify eligibility for devices to join their tailnets using machine identity certificates. TLS client certs could potentially fulfill this role but the initial customer for this feature has technical requirements that prevent their use. Instead, the certificate is loaded from the Windows local machine certificate store and uses its RSA public key to sign the RegisterRequest message. There is room to improve the flexibility of this feature in future and it is currently only tested on Windows (although Darwin theoretically works too), but this offers a reasonable starting place for now. Updates tailscale/coral#6 Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>		5 years ago
..
derpmap.go	tailcfg, net/netcheck: let control mark "Avoid" bit on DERP regions	5 years ago
tailcfg.go	control/controlclient: sign RegisterRequest (#1549)	5 years ago
tailcfg_clone.go	tailcfg, net/portmapper, wgengine/magicsock: add NetInfo.HavePortMap	5 years ago
tailcfg_test.go	tailcfg, net/portmapper, wgengine/magicsock: add NetInfo.HavePortMap	5 years ago