You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Brad Fitzpatrick
a182b864ac
tsd, all: add Sys.ExtraRootCAs, plumb through TLS dial paths
...
Add ExtraRootCAs *x509.CertPool to tsd.System and plumb it through
the control client, noise transport, DERP, and wgengine layers so
that platforms like Android can inject user-installed CA certificates
into Go's TLS verification.
tlsdial.Config now honors base.RootCAs as additional trusted roots,
tried after system roots and before the baked-in LetsEncrypt fallback.
SetConfigExpectedCert gets the same treatment for domain-fronted DERP.
The Android client will set sys.ExtraRootCAs with a pool built from
x509.SystemCertPool + user-installed certs obtained via the Android
KeyStore API, replacing the current SSL_CERT_DIR environment variable
approach.
Updates #8085
Change-Id: Iecce0fd140cd5aa0331b124e55a7045e24d8e0c2
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
1 week ago
..
ace
all: remove AUTHORS file and references to it
3 months ago
art
all: use Go 1.26 things, run most gofix modernizers
1 month ago
bakedroots
all: remove AUTHORS file and references to it
3 months ago
batching
cmd/vet: add subtestnames analyzer; fix all existing violations
2 weeks ago
captivedetection
all: use Go 1.26 things, run most gofix modernizers
1 month ago
connectproxy
all: remove AUTHORS file and references to it
3 months ago
dns
cmd/cloner, cmd/viewer: handle named map/slice types with Clone/View methods
2 weeks ago
dnscache
all: remove AUTHORS file and references to it
3 months ago
dnsfallback
all: remove AUTHORS file and references to it
3 months ago
flowtrack
all: remove AUTHORS file and references to it
3 months ago
ipset
all: use `bart.Lite` instead of `bart.Table` where appropriate
3 weeks ago
ktimeout
all: remove AUTHORS file and references to it
3 months ago
memnet
all: remove AUTHORS file and references to it
3 months ago
netaddr
all: remove AUTHORS file and references to it
3 months ago
netcheck
cmd/vet: add subtestnames analyzer; fix all existing violations
2 weeks ago
neterror
all: use Go 1.26 things, run most gofix modernizers
1 month ago
netkernelconf
all: remove AUTHORS file and references to it
3 months ago
netknob
all: remove AUTHORS file and references to it
3 months ago
netmon
ipn/ipnlocal,net/netmon: make frequent darkwake more efficient
2 weeks ago
netns
netns: add Android callback to bind socket to network ( #18915 )
1 month ago
netstat
all: remove AUTHORS file and references to it
3 months ago
netutil
all: use Go 1.26 things, run most gofix modernizers
1 month ago
netx
all: remove AUTHORS file and references to it
3 months ago
packet
net,tsnet: fix the capitalisation of "Wireshark"
3 weeks ago
ping
all: remove AUTHORS file and references to it
3 months ago
portmapper
all: remove AUTHORS file and references to it
3 months ago
porttrack
net/porttrack: change magic listen address format for Go 1.26
1 month ago
proxymux
all: remove AUTHORS file and references to it
3 months ago
routetable
netns,wgengine: add OpenBSD support to netns via an rtable
2 months ago
sockopts
all: remove AUTHORS file and references to it
3 months ago
socks5
all: use Go 1.26 things, run most gofix modernizers
1 month ago
sockstats
all: remove AUTHORS file and references to it
3 months ago
speedtest
cmd/vet: add subtestnames analyzer; fix all existing violations
2 weeks ago
stun
cmd/vet: add subtestnames analyzer; fix all existing violations
2 weeks ago
stunserver
all: use Go 1.26 things, run most gofix modernizers
1 month ago
tcpinfo
all: remove AUTHORS file and references to it
3 months ago
tlsdial
tsd, all: add Sys.ExtraRootCAs, plumb through TLS dial paths
1 week ago
tsaddr
all: remove AUTHORS file and references to it
3 months ago
tsdial
all: remove AUTHORS file and references to it
3 months ago
tshttpproxy
cmd/vet: add subtestnames analyzer; fix all existing violations
2 weeks ago
tstun
tailcfg,ipn/ipnlocal: regulate netmap caching via a node attribute ( #19117 )
2 weeks ago
udprelay
cmd/vet: add subtestnames analyzer; fix all existing violations
2 weeks ago
wsconn
all: remove AUTHORS file and references to it
3 months ago