You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Brad Fitzpatrick
7fac0175c0
cmd/derper, derp/derphttp: support, generate self-signed IP address certs
...
For people who can't use LetsEncrypt because it's banned.
Per https://github.com/tailscale/tailscale/issues/11776#issuecomment-2520955317
This does two things:
1) if you run derper with --certmode=manual and --hostname=$IP_ADDRESS
we previously permitted, but now we also:
* auto-generate the self-signed cert for you if it doesn't yet exist on disk
* print out the derpmap configuration you need to use that
self-signed cert
2) teaches derp/derphttp's derp dialer to verify the signature of
self-signed TLS certs, if so declared in the existing
DERPNode.CertName field, which previously existed for domain fronting,
separating out the dial hostname from how certs are validates,
so it's not overloaded much; that's what it was meant for.
Fixes #11776
Change-Id: Ie72d12f209416bb7e8325fe0838cd2c66342c5cf
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
1 year ago
..
addlicense
all: fix golangci-lint errors
1 year ago
build-webclient
client/web: precompress assets
2 years ago
checkmetrics
cmd/checkmetrics: add command for checking metrics against kb
1 year ago
cloner
cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types
2 years ago
connector-gen
cmd/connector-gen: add helper tool for wide app connector configurations
2 years ago
containerboot
cmd/containerboot: fix nil pointer exception ( #15090 )
1 year ago
derper
cmd/derper, derp/derphttp: support, generate self-signed IP address certs
1 year ago
derpprobe
prober: support filtering regions by region ID in addition to code
1 year ago
dist
release/dist/qnap: add qnap target builder
2 years ago
get-authkey
cmd,tsnet,internal/client: create internal shim to deprecated control plane API
1 year ago
gitops-pusher
cmd/gitops-pusher: log error details when unable to fetch ACL ETag
1 year ago
hello
cmd/hello: display native ipv4 ( #15191 )
1 year ago
k8s-nameserver
cmd/k8s-nameserver: fix AAAA record query response ( #12412 )
2 years ago
k8s-operator
cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. ( #15157 )
1 year ago
mkmanifest
cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS
3 years ago
mkpkg
go.mod: upgrade nfpm to v2 ( #8786 )
3 years ago
mkversion
version/mkversion: open-source version generation logic
3 years ago
nardump
all: update copyright and license headers
3 years ago
natc
cmd/natc: remove speculative tuning from natc
1 year ago
netlogfmt
all: use Go 1.22 range-over-int
2 years ago
nginx-auth
tailcfg,all: add and use Node.IsTagged()
3 years ago
pgproxy
all: use new LocalAPI client package location
1 year ago
printdep
cmd/printdep: print correct toolchain URL
3 years ago
proxy-to-grafana
all: use new LocalAPI client package location
1 year ago
sniproxy
all: use new LocalAPI client package location
1 year ago
speedtest
all: update copyright and license headers
3 years ago
ssh-auth-none-demo
ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh
1 year ago
stunc
cmd/stunc: enforce read timeout deadline ( #14309 )
1 year ago
stund
go.toolchain.branch: update to Go 1.24 ( #15016 )
1 year ago
stunstamp
cmd/stunstamp: add protocol context to timeout logs ( #13422 )
2 years ago
sync-containers
all: adjust some build tags for plan9
3 years ago
systray
cmd/systray: add cmd/systray back as a small client/systray wrapper
1 year ago
tailscale
go.toolchain.branch: update to Go 1.24 ( #15016 )
1 year ago
tailscaled
go.toolchain.branch: update to Go 1.24 ( #15016 )
1 year ago
testcontrol
all: use Go 1.22 range-over-int
2 years ago
testwrapper
cmd/testwrapper: Display package-level output
1 year ago
tl-longchain
all: use new LocalAPI client package location
1 year ago
tsconnect
go.toolchain.branch: update to Go 1.24 ( #15016 )
1 year ago
tsidp
cmd/tsidp: use constant time comparison for client_id/secret ( #15222 )
1 year ago
tsshd
all: update copyright and license headers
3 years ago
tta
all: use new LocalAPI client package location
1 year ago
viewer
cmd/viewer,all: consistently use "read-only" instead of "readonly"
1 year ago
vnet
tstest/natlab/vnet: add start of IPv6 support
2 years ago
xdpderper
all: add test for package comments, fix, add comments as needed
2 years ago