10 Commits

Include renames

Author	SHA1	Message	Date
Wade Simmons	ab539f8a3f	Add smoke test for ipv6 (#1764) ... * Add smoke test for ipv6 * fix ncat listen for ipv6	2026-06-16 12:13:05 -04:00
Nate Brown	3d34cc9b74	Try to make smoke less flakey (#1663)	2026-04-20 16:38:14 -05:00
Wade Simmons	94e89a1045	smoke-tests: guess the lighthouse container IP better (#1347) ... Currently we just assume you are using the default Docker bridge network config of `172.17.0.0/24`. This change works to try to detect if you are using a different config, but still only works if you are using a `/24` and aren't running any other containers. A future PR could make this better by launching the lighthouse container first and then fetching what the IP address is before continuing with the configuration.	2025-03-10 10:17:54 -04:00
Wade Simmons	4f4941e187	Add Vagrant based smoke tests (#1067) ... * WIP smoke test freebsd * fix bitrot We now test that the firewall blocks inbound on host3 from host2 * WIP ipv6 test * cleanup * rename to make clear * fix filename * restore * no sudo docker * WIP * WIP * WIP * WIP * extra smoke tests * WIP * WIP * add over improvements made in smoke.sh * more tests * use generic/freebsd14 * cleanup from test * smoke test openbsd-amd64 * add netbsd-amd64 * try to fix vagrant	2024-04-30 11:02:16 -04:00
Wade Simmons	280fa026ea	smoke-test: don't assume docker needs sudo (#958) ... Let the host deal with this detail if necessary	2023-09-07 13:57:41 -04:00
Wade Simmons	e0185c4b01	Support NIST curve P256 (#769) ... * Support NIST curve P256 This change adds support for NIST curve P256. When you use `nebula-cert ca` or `nebula-cert keygen`, you can specify `-curve P256` to enable it. The curve to use is based on the curve defined in your CA certificate. Internally, we use ECDSA P256 to sign certificates, and ECDH P256 to do Noise handshakes. P256 is not supported natively in Noise Protocol, so we define `DHP256` in the `noiseutil` package to implement support for it. You cannot have a mixed network of Curve25519 and P256 certificates, since the Noise protocol will only attempt to parse using the Curve defined in the host's certificate. * verify the curves match in VerifyPrivateKey This would have failed anyways once we tried to actually use the bytes in the private key, but its better to detect the issue up front with a better error message. * add cert.Curve argument to Sign method * fix mismerge * use crypto/ecdh This is the preferred method for doing ECDH functions now, and also has a boringcrypto specific codepath. * remove other ecdh uses of crypto/elliptic use crypto/ecdh instead	2023-05-04 17:50:23 -04:00
Wade Simmons	73081d99bc	add make smoke-docker (#287) ... This makes it easier to use the docker container smoke test that GitHub actions runs. There is also `make smoke-docker-race` that runs the smoke test with `-race` enabled.	2021-03-01 11:15:15 -05:00
Wade Simmons	55858c64cc	smoke test: test firewall inbound / outbound (#240) ... Test that basic inbound / outbound firewall rules work during the smoke test. This change sets an inbound firewall rule on host3, and a new host4 with outbound firewall rules. It also tests that conntrack allows packets once the connection has been established.	2020-06-26 13:46:51 -04:00
Wade Simmons	c321e40d24	generate the smoke config files	2019-12-17 08:38:59 -05:00
Wade Simmons	73c6d555b5	Github Actions: Smoke test ... This change adds a new Github Action, a 3 node smoke test. It starts three docker containers (one lighthouse and two standard nodes) and tests that they can all ping each other. This should hopefully detect any basic runtime failures in PRs.	2019-12-17 00:17:25 -05:00