nebula

0 Fork 0

mirror of https://github.com/slackhq/nebula.git synced 2026-11-15 08:56:52 +01:00

Author	SHA1	Message	Date
John Maguire	5bf666dd90	Treat uppercase blocked fingerprints the same as lowercase (#1964 ) - Error for invalid on startup - Still block the valid blocklist entries when a reload has a bad one	2026-10-16 16:28:37 -04:00
Nate Brown	915495d5f4	Fail the reload on a startup only value that would fail a restart, and stop asking for tun.dev restarts that change nothing (#1953 ) smoke-extra / freebsd-amd64 (push) Failing after 25s Details smoke-extra / linux-amd64-ipv6disable (push) Failing after 13s Details smoke-extra / netbsd-amd64 (push) Failing after 11s Details smoke-extra / openbsd-amd64 (push) Failing after 12s Details smoke-extra / linux-386 (push) Failing after 14s Details smoke / Run multi node smoke test (push) Failing after 1m43s Details Build and test / Static checks (push) Successful in 2m25s Details Build and test / Test linux (push) Failing after 1m28s Details Build and test / Test linux-pkcs11 (push) Failing after 2m5s Details Build and test / Test linux-boringcrypto (push) Failing after 2m56s Details Build and test / Test linux-fips140 (push) Failing after 3m3s Details Build and test / Cross-build linux-arm (push) Successful in 3m14s Details Build and test / Cross-build linux-mips (push) Successful in 3m48s Details Build and test / Cross-build linux-other (push) Successful in 3m13s Details Build and test / Cross-build windows (push) Successful in 1m3s Details Build and test / Cross-build freebsd (push) Successful in 1m34s Details Build and test / Cross-build netbsd (push) Successful in 1m36s Details Build and test / Cross-build openbsd (push) Successful in 1m37s Details Build and test / Cross-build mobile (push) Successful in 3m33s Details smoke / Run self traffic smoke test on macOS (push) Canceled after 0s Details Build and test / Test macos (push) Canceled after 0s Details Build and test / Test windows (push) Canceled after 0s Details Build and test / CI status (push) Canceled after 0s Details smoke-extra / Run windows smoke test (push) Canceled after 0s Details	2026-10-15 23:34:09 -05:00
Nate Brown	1a0ac25db0	Report how a config reload went: failures, restarts required, and the keys that need one (#1935 )	2026-10-15 15:36:39 -05:00
Wade Simmons	9c5d701648	Support native Golang "fips140" mode (#1696 ) Add support for the "fips140" mode of Go: - https://go.dev/doc/security/fips140 - https://csrc.nist.gov/projects/cryptographic-module-validation-program/certificate/5247 You can build with `make fips140`, see the README changes for more info. Some differences from the boringcrypto builds: - We switch to using `go:linkname crypto/tls.aeadAESGCMTLS13`, which gives us the fips implementation for both `boringcrypto` and `fips140` modes. This means we also no longer need `-checklinkname=0` - Go native `fips140` doesn't need CGO_ENABLED=1 - We decide if we should use the fips140 GCM at runtime, if `fips140.Enabled()` is true. If you use the `make release-fips140`, we build with build tag `fips140enforce` which ensures the binary is running with fips140 enabled and that only P256 / AES-GCM is being used. If you don't want this enforce mode, you can build without the build tag.	2026-08-21 19:33:40 -04:00