You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Anton Tolchanov
fd6686d81a
tka: truncate long rotation signature chains
...
When a rotation signature chain reaches a certain size, remove the
oldest rotation signature from the chain before wrapping it in a new
rotation signature.
Since all previous rotation signatures are signed by the same wrapping
pubkey (node's own tailnet lock key), the node can re-construct the
chain, re-signing previous rotation signatures. This will satisfy the
existing certificate validation logic.
Updates #13185
Signed-off-by: Anton Tolchanov <anton@tailscale.com>
2 years ago
..
testdata
ipn/ipnlocal: fix the path for writing cert files ( #7203 )
3 years ago
autoupdate.go
clientupdate: return true for CanAutoUpdate for macsys ( #12746 )
2 years ago
autoupdate_disabled.go
ipn/ipnlocal: periodically run auto-updates when "offline" ( #12118 )
2 years ago
breaktcp_darwin.go
cmd/tailscale: add debug commands to break connections
3 years ago
breaktcp_linux.go
cmd/tailscale: add debug commands to break connections
3 years ago
c2n.go
posture: add network hardware addresses to posture identity
2 years ago
c2n_pprof.go
ipn/ipnlocal: add c2n /debug/pprof/allocs endpoint
2 years ago
c2n_test.go
util/cmpx: delete now that we're using Go 1.22
2 years ago
cert.go
cmd/tailscale: add --min-validity flag to the cert command ( #12822 )
2 years ago
cert_js.go
ipn/ipnlocal: add c2n method to check on TLS cert fetch status
2 years ago
cert_test.go
all: use Go 1.21 slices, maps instead of x/exp/{slices,maps}
3 years ago
dnsconfig_test.go
util/cmpx: delete now that we're using Go 1.22
2 years ago
drive.go
ipn/ipnlocal: refactor and cleanup profileManager
2 years ago
expiry.go
ssh/tailssh: use control server time instead of local time
2 years ago
expiry_test.go
types/netmap, all: make NetworkMap.SelfNode a tailcfg.NodeView
3 years ago
local.go
cli: implement `tailscale dns status` ( #13353 )
2 years ago
local_test.go
ipn/ipnlocal: refactor and cleanup profileManager
2 years ago
loglines_test.go
ipn/ipnlocal, all: plumb health trackers in tests
2 years ago
network-lock.go
tka: truncate long rotation signature chains
2 years ago
network-lock_test.go
tka: truncate long rotation signature chains
2 years ago
peerapi.go
proxymap, various: distinguish between different protocols
2 years ago
peerapi_h2c.go
all: update copyright and license headers
3 years ago
peerapi_macios_ext.go
net/netmon, add: add netmon.State type alias of interfaces.State
2 years ago
peerapi_test.go
ipn/ipnlocal, all: plumb health trackers in tests
2 years ago
profiles.go
ipn/ipnlocal: refactor and cleanup profileManager
2 years ago
profiles_notwindows.go
ipn/ipnlocal: refactor and cleanup profileManager
2 years ago
profiles_test.go
ipn/ipnlocal: refactor and cleanup profileManager
2 years ago
profiles_windows.go
ipn/ipnlocal: refactor and cleanup profileManager
2 years ago
serve.go
ipn/ipnlocal: fix race condition that results in a panic sending on a closed channel
2 years ago
serve_test.go
ipn/ipnlocal: fix race condition that results in a panic sending on a closed channel
2 years ago
ssh.go
ipnlocal: log failure to get ssh host keys
2 years ago
ssh_stub.go
ipnlocal: log failure to get ssh host keys
2 years ago
ssh_test.go
ipn/ipnlocal: plumb health.Tracker into profileManager constructor
2 years ago
state_test.go
ipn/ipnlocal: always send auth URL notifications when a user requests interactive login
2 years ago
taildrop.go
ipn/localapi: add support for multipart POST to file-put
2 years ago
web_client.go
all: remove LenIter, use Go 1.22 range-over-int instead
2 years ago
web_client_stub.go
ipn/ipnlocal: add mutex to webClient struct
2 years ago