You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Brad Fitzpatrick
150cd30b1d
ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation
...
We previously baked in the LetsEncrypt x509 root CA for our tlsdial
package.
This moves that out into a new "bakedroots" package and is now also
shared by ipn/ipnlocal's cert validation code (validCertPEM) that
decides whether it's time to fetch a new cert.
Otherwise, a machine without LetsEncrypt roots locally in its system
roots is unable to use tailscale cert/serve and fetch certs.
Fixes #14690
Change-Id: Ic88b3bdaabe25d56b9ff07ada56a27e3f11d7159
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
1 year ago
..
conffile
ipn/conffile: don't depend on hujson on iOS/Android
2 years ago
ipnauth
ipn/{ipnauth,ipnlocal,ipnserver}, client/tailscale: make ipnserver.Server testable
1 year ago
ipnlocal
ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation
1 year ago
ipnserver
ipn/ipnserver: fix a deadlock in (*Server).blockWhileIdentityInUse
1 year ago
ipnstate
all: illumos/solaris userspace only support
1 year ago
localapi
util/uniq,types/lazy,*: delete code that's now in Go std
1 year ago
policy
ipn,tailconfig: clean up unreleased and removed app connector service
2 years ago
store
kube/{kubeapi,kubeclient},ipn/store/kubestore,cmd/{containerboot,k8s-operator}: emit kube store Events ( #14112 )
1 year ago
backend.go
ipn: declare NotifyWatchOpt consts without using iota
1 year ago
conf.go
ipn/conf.go: add VIPServices to tailscaled configfile ( #14345 )
1 year ago
doc.go
IPN: Update ServeConfig to accept configuration for Services.
1 year ago
ipn_clone.go
IPN: Update ServeConfig to accept configuration for Services.
1 year ago
ipn_test.go
all: do not depend on the testing package
2 years ago
ipn_view.go
cmd/viewer,all: consistently use "read-only" instead of "readonly"
1 year ago
prefs.go
cmd/tailscale,ipn,tailcfg: add `tailscale advertise` subcommand behind envknob ( #13734 )
2 years ago
prefs_test.go
cmd/tailscale,ipn,tailcfg: add `tailscale advertise` subcommand behind envknob ( #13734 )
2 years ago
serve.go
ipn: [serve] warn that foreground funnel won't work if shields are up ( #14685 )
1 year ago
serve_test.go
ipn: [serve] warn that foreground funnel won't work if shields are up ( #14685 )
1 year ago
store.go
ipn: add comment about thread-safety to StateStore
2 years ago
store_test.go
ipn: avoid useless no-op WriteState calls
3 years ago