Commit Graph

  • 7edcf620c0 We only need the certificate in ConnectionState (#953) Nate Brown 2023-08-21 14:11:06 -05:00
  • 4c89b3c6a3 cleanup Wade Simmons 2023-08-21 13:09:25 -04:00
  • 5cc43ea9cd Merge branch 'master' into mutex-debug Wade Simmons 2023-08-21 12:42:36 -04:00
  • 5a131b2975 Combine ca, cert, and key handling (#952) Nate Brown 2023-08-14 21:32:40 -05:00
  • 223cc6e660 Limit how often a busy tunnel can requery the lighthouse (#940) Nate Brown 2023-08-08 13:26:41 -05:00
  • 5671c6607c dependabot: group together common deps (#950) Wade Simmons 2023-08-08 13:15:42 -04:00
  • 7ecafbe61d Bump golang.org/x/net from 0.13.0 to 0.14.0 (#947) dependabot[bot] 2023-08-08 10:04:46 -05:00
  • 546eb3bfbc Bump golang.org/x/crypto from 0.11.0 to 0.12.0 (#949) dependabot[bot] 2023-08-07 21:28:06 -05:00
  • 7364d99e34 Bump golang.org/x/term from 0.10.0 to 0.11.0 (#946) dependabot[bot] 2023-08-07 21:07:30 -05:00
  • 83b6dc7b16 Bump golang.org/x/net from 0.12.0 to 0.13.0 (#943) dependabot[bot] 2023-08-02 14:28:32 -04:00
  • 3d0da7c859 update mergo to 1.0.0 (#941) Wade Simmons 2023-08-02 14:00:20 -04:00
  • ed00f5d530 Remove unused config code (last edited 4yrs ago) (#938) Caleb Jasik 2023-07-31 15:59:20 -05:00
  • 38e56a4858 Bump golang.org/x/net from 0.9.0 to 0.12.0 (#931) dependabot[bot] 2023-07-27 15:43:16 -05:00
  • fce93ccb54 Bump google.golang.org/protobuf from 1.30.0 to 1.31.0 (#930) dependabot[bot] 2023-07-27 15:42:33 -05:00
  • 0d715effbc Bump Apple-Actions/import-codesign-certs from 1 to 2 (#923) dependabot[bot] 2023-07-27 15:31:36 -05:00
  • 0c003b64f1 Bump golang.org/x/term from 0.8.0 to 0.10.0 (#928) dependabot[bot] 2023-07-27 14:38:36 -05:00
  • 14d0106716 Send the lh update worker into its own routine instead of taking over the reload routine (#935) Nate Brown 2023-07-27 14:38:10 -05:00
  • 959b015b3b Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.3 (#933) dependabot[bot] 2023-07-27 14:36:36 -05:00
  • 0bffa76b5e Build for openbsd (#812) Nate Brown 2023-07-27 14:27:35 -05:00
  • 03e70210a5 Add support for NetBSD (#916) c0repwn3r 2023-07-27 14:44:47 -04:00
  • 9c6592b159 Guard e2e udp and tun channels when closed (#934) Nate Brown 2023-07-26 12:52:14 -05:00
  • e5af94e27a Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0 (#927) dependabot[bot] 2023-07-24 13:56:09 -04:00
  • 96f51f78ea Bump golang.org/x/sys from 0.8.0 to 0.10.0 (#926) dependabot[bot] 2023-07-24 13:53:39 -04:00
  • a10baeee92 Pull hostmap and pending hostmap apart, remove unused functions (#843) Nate Brown 2023-07-24 12:37:52 -05:00
  • 52c9e360e7 Bump github.com/miekg/dns from 1.1.54 to 1.1.55 (#925) dependabot[bot] 2023-07-24 12:52:29 -04:00
  • 8caaff7109 Bump github.com/stretchr/testify from 1.8.2 to 1.8.4 (#924) dependabot[bot] 2023-07-24 12:51:31 -04:00
  • 1e3c155896 Attempt to notify systemd of service readiness on linux (#929) Nate Brown 2023-07-24 11:30:18 -05:00
  • f5db03c834 add dependabot config (#922) Wade Simmons 2023-07-21 17:21:58 -04:00
  • c5ce945852 Update README to include a link to go install docs (#919) Nate Brown 2023-07-20 21:30:38 -05:00
  • 7e380bde7e Document new DNS config options (#879) John Maguire 2023-07-10 15:19:05 -04:00
  • a3e59a38ef Use registered io on Windows when possible (#905) Nate Brown 2023-07-10 12:43:48 -05:00
  • 0af7e6a1dd improve comments add-http-pprof Tim Vaillancourt 2023-07-07 17:06:19 +02:00
  • c14ad0f27b Cleanup code comment Tim Vaillancourt 2023-07-07 02:07:33 +02:00
  • af958676b8 Cleanup code Tim Vaillancourt 2023-07-07 02:00:30 +02:00
  • 70779b26ad Fix typo in log Tim Vaillancourt 2023-07-07 01:43:42 +02:00
  • 90aa8efb29 remove dupe stats.path check Tim Vaillancourt 2023-07-07 01:37:36 +02:00
  • dd7f12f7c0 Add http pprof profiling endpoint Tim Vaillancourt 2023-07-07 01:35:19 +02:00
  • 8ba5d64dbc Add support for naming FreeBSD tun devices (#903) John Maguire 2023-06-22 12:13:31 -04:00
  • 3bbf5f4e67 Use an interface for udp conns (#901) Nate Brown 2023-06-14 10:48:52 -05:00
  • 928731acfe fix up the release workflow (#891) Wade Simmons 2023-06-14 11:45:01 -04:00
  • 57eb80e9fb v1.7.2 (#887) v1.7.2 Nate Brown 2023-06-01 10:05:07 -05:00
  • 96f4dcaab8 Fix reconfig freeze attempting to send to an unbuffered, unread channel (#886) brad-defined 2023-05-31 16:05:46 -04:00
  • 6d8c5f437c GitHub actions update setup-go (#881) Wade Simmons 2023-05-23 13:24:33 -04:00
  • 165b671e70 v1.7.1 (#878) v1.7.1 John Maguire 2023-05-18 15:39:24 -04:00
  • 6be0bad68a Fix static_host_map DNS lookup Linux issue - put v4 addr into v6 slice(#877) brad-defined 2023-05-18 14:13:32 -04:00
  • a2b9747b0f Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2023-05-17 12:57:13 -04:00
  • 7ae3cd25f8 v1.7.0 (#870) v1.7.0 Wade Simmons 2023-05-17 11:02:53 -04:00
  • 9a7ed57a3f Cache cert verification methods (#871) Wade Simmons 2023-05-17 10:14:26 -04:00
  • 0e593ad582 Merge branch 'master' into multiport Wade Simmons 2023-05-09 15:37:30 -04:00
  • eb9f22a8fa fix mismerge of P256 and encrypted private keys (#869) Wade Simmons 2023-05-09 14:05:55 -04:00
  • 92c4245329 Merge remote-tracking branch 'origin/master' into mutex-debug Wade Simmons 2023-05-09 12:01:44 -04:00
  • 54a8499c7b Fix go vet (#868) Nate Brown 2023-05-09 11:01:30 -05:00
  • e5789770b1 keep track of what file/line the locks were grabbed on Wade Simmons 2023-05-09 11:51:02 -04:00
  • a83f0ca470 Merge remote-tracking branch 'origin/master' into mutex-debug Wade Simmons 2023-05-09 11:42:05 -04:00
  • 90e9a8e42c use delete Wade Simmons 2023-05-09 11:41:53 -04:00
  • 419aaf2e36 issue templates: remove Report Security Vulnerability (#867) Wade Simmons 2023-05-09 11:37:48 -04:00
  • 1701087035 Add destination CIDR checking (#507) Ilya Lukyanov 2023-05-09 16:37:23 +01:00
  • a9cb2e06f4 Add ability to respect the system route table for unsafe route on linux (#839) Nate Brown 2023-05-09 10:36:55 -05:00
  • 115b4b70b1 add SECURITY.md (#864) Wade Simmons 2023-05-09 11:25:21 -04:00
  • 0707caedb4 document P256 and BoringCrypto (#865) Wade Simmons 2023-05-09 11:24:52 -04:00
  • 9105eba939 also validate hostinfo locks Wade Simmons 2023-05-09 11:22:55 -04:00
  • bd9cc01d62 Dns static lookerupper (#796) brad-defined 2023-05-09 11:22:08 -04:00
  • 3e5e48f937 use mutex_debug during Github Actions run Wade Simmons 2023-05-09 10:39:28 -04:00
  • afde2080d6 Merge remote-tracking branch 'origin/master' into mutex-debug Wade Simmons 2023-05-09 10:29:37 -04:00
  • d1f786419c Try rehandshaking a main hostinfo after releasing hostmap locks (#863) Nate Brown 2023-05-08 14:43:03 -05:00
  • 31ed9269d7 add test for GOEXPERIMENT=boringcrypto (#861) Wade Simmons 2023-05-08 13:27:01 -04:00
  • e6eeef785e mutex_debug Wade Simmons 2023-05-08 11:17:14 -04:00
  • 48eb63899f Have lighthouses ack updates to reduce test packet traffic (#851) Nate Brown 2023-05-05 14:44:03 -05:00
  • b26c13336f Fix test on master (#860) Nate Brown 2023-05-04 20:11:33 -05:00
  • e0185c4b01 Support NIST curve P256 (#769) Wade Simmons 2023-05-04 17:50:23 -04:00
  • 702e1c59bd Always disconnect block listed hosts (#858) Nate Brown 2023-05-04 16:09:42 -05:00
  • 5fe8f45d05 Clear lighthouse cache for a vpn ip on a dead connection when its the final hostinfo (#857) Nate Brown 2023-05-04 15:42:12 -05:00
  • 03e4a7f988 Rehandshaking (#838) Nate Brown 2023-05-04 15:16:37 -05:00
  • 0b67b19771 add boringcrypto Makefile targets (#856) Wade Simmons 2023-05-04 15:42:45 -04:00
  • a0d3b93ae5 update dependencies: 2023-05 (#855) Wade Simmons 2023-05-04 15:42:15 -04:00
  • 58ec1f7a7b build with go1.20 (#854) Wade Simmons 2023-05-04 11:35:03 -04:00
  • 28ecfcbc03 Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2023-05-03 10:50:06 -04:00
  • 397fe5f879 Add ability to skip installing unsafe routes on the os routing table (#831) Nate Brown 2023-04-10 12:32:37 -05:00
  • 9b03053191 update EncReader and EncWriter interface function args to have concrete types (#844) brad-defined 2023-04-07 14:28:37 -04:00
  • 3cb4e0ef57 Allow listen.host to contain names (#825) Nate Brown 2023-04-05 11:29:26 -05:00
  • e0553822b0 Use NewGCMTLS (when using experiment boringcrypto) (#803) Wade Simmons 2023-04-05 11:08:23 -04:00
  • d3fe3efcb0 Fix handshake retry regression (#842) Nate Brown 2023-04-05 10:04:30 -05:00
  • fd99ce9a71 Use fewer test packets (#840) Nate Brown 2023-04-04 13:42:24 -05:00
  • 6685856b5d emit certificate.expiration_ttl_seconds metric (#782) Wade Simmons 2023-04-03 21:18:16 -04:00
  • a56a97e5c3 Add ability to encrypt CA private key at rest (#386) John Maguire 2023-04-03 13:59:38 -04:00
  • e71059a410 Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2023-04-03 11:30:41 -04:00
  • ee8e1348e9 Use connection manager to drive NAT maintenance (#835) Nate Brown 2023-03-31 15:45:05 -05:00
  • 1a6c657451 Normalize logs (#837) Nate Brown 2023-03-30 15:07:31 -05:00
  • 6b3d42efa5 Use atomic.Pointer for certState (#833) Nate Brown 2023-03-30 13:04:09 -05:00
  • 2801fb2286 Fix relay (#827) brad-defined 2023-03-30 12:09:20 -04:00
  • e28336c5db probes to the lh are not generally useful as recv_error should catch (#408) Ryan Huber 2023-03-29 13:09:36 -07:00
  • 3e5c7e6860 add punchy.respond_delay config option (#721) Wade Simmons 2023-03-29 15:32:35 -04:00
  • 8a82e0fb16 ssh: add save-mutex-profile (#737) Wade Simmons 2023-03-29 15:30:28 -04:00
  • f0ef80500d Remove dead code and re-order transit from pending to main hostmap on stage 2 (#828) Nate Brown 2023-03-17 15:36:24 -05:00
  • 61b784d2bb Update dependencies 2023-03 (#824) Wade Simmons 2023-03-13 15:37:32 -04:00
  • 5da79e2a4c Run make vet in CI (#693) Caleb Jasik 2023-03-13 14:35:12 -05:00
  • e1af37e46d add calculated_remotes (#759) Wade Simmons 2023-03-13 15:09:08 -04:00
  • 6e0ae4f9a3 firewall: add option to send REJECT replies (#738) Wade Simmons 2023-03-13 15:08:40 -04:00
  • aec7f5f865 Merge remote-tracking branch 'origin/master' into multiport Wade Simmons 2023-03-13 15:07:32 -04:00
  • f0ac61c1f0 Add nebula.plist based on the homebrew nebula LaunchDaemon plist (#762) Caleb Jasik 2023-03-13 13:16:46 -05:00