mirror of
https://github.com/slackhq/nebula.git
synced 2026-11-15 11:56:52 +01:00
Matt RichardsonandClaude Fable 5.1
660a271466
A program that verifies certificates against its own CAs, as
nebula-auth-request does, needs the certificate itself rather than the
parsed identity, and it asked the ssh debug server for it. The info API
now serves print-cert, so it can ask there instead.
- print-cert declares Identity: it reads a certificate from the hostmap or our own, and nothing operational
- -address names the vpn addr, with a port accepted and stripped and 4in6 unmapped, as identity takes it; the operand stays, and giving both is refused
- an address of our own answers with our own certificate, and a tunnel without one is not found, a 404 on the API
- with no address the certificate is the one whoami reports, the v2 when both versions are loaded, not the one handshakes start with
- GET /v1/print-cert?address=<addr>&raw=true answers {"pem": ...}; example config, CHANGELOG, surface test, goldens and an e2e check
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
1363 lines
43 KiB
Plaintext
1363 lines
43 KiB
Plaintext
$ version
|
|
e2e-test
|
|
|
|
$ version -json
|
|
{"version":"e2e-test"}
|
|
|
|
$ version -pretty
|
|
{
|
|
"version": "e2e-test"
|
|
}
|
|
|
|
$ device-info
|
|
name= cidr=[10.222.0.1/24]
|
|
|
|
$ device-info -json
|
|
{"name":"","cidr":["10.222.0.1/24"]}
|
|
|
|
$ device-info -pretty
|
|
{
|
|
"name": "",
|
|
"cidr": [
|
|
"10.222.0.1/24"
|
|
]
|
|
}
|
|
|
|
$ list-hostmap
|
|
|
|
$ list-hostmap -json
|
|
[]
|
|
|
|
$ list-hostmap -pretty
|
|
[]
|
|
|
|
$ list-hostmap -by-index
|
|
|
|
$ list-hostmap -json -by-index
|
|
[]
|
|
|
|
$ list-hostmap -pretty -by-index
|
|
[]
|
|
|
|
$ list-pending-hostmap
|
|
[10.222.0.9]: []
|
|
|
|
$ list-pending-hostmap -json
|
|
[{"vpnAddrs":["10.222.0.9"],"localIndex":<n>,"remoteIndex":<n>,"remoteAddrs":[],"cert":null,"messageCounter":<n>,"currentRemote":"","currentRelaysToMe":[],"currentRelaysThroughMe":[]}]
|
|
|
|
$ list-pending-hostmap -pretty
|
|
[
|
|
{
|
|
"vpnAddrs": [
|
|
"10.222.0.9"
|
|
],
|
|
"localIndex": <n>,
|
|
"remoteIndex": <n>,
|
|
"remoteAddrs": [],
|
|
"cert": null,
|
|
"messageCounter": <n>,
|
|
"currentRemote": "",
|
|
"currentRelaysToMe": [],
|
|
"currentRelaysThroughMe": []
|
|
}
|
|
]
|
|
|
|
$ list-pending-hostmap -by-index
|
|
|
|
$ list-pending-hostmap -json -by-index
|
|
[]
|
|
|
|
$ list-pending-hostmap -pretty -by-index
|
|
[]
|
|
|
|
$ list-lighthouse-addrmap
|
|
10.222.0.9: {}
|
|
|
|
$ list-lighthouse-addrmap -json
|
|
[{"vpnAddr":"10.222.0.9","addrs":{}}]
|
|
|
|
$ list-lighthouse-addrmap -pretty
|
|
[
|
|
{
|
|
"vpnAddr": "10.222.0.9",
|
|
"addrs": {}
|
|
}
|
|
]
|
|
|
|
$ print-cert
|
|
{
|
|
"details": {
|
|
"curve": "CURVE25519",
|
|
"groups": [],
|
|
"isCa": false,
|
|
"issuer": "<hex>",
|
|
"name": "output-golden",
|
|
"networks": [
|
|
"10.222.0.1/24"
|
|
],
|
|
"notAfter": "<time>",
|
|
"notBefore": "<time>",
|
|
"publicKey": "<hex>",
|
|
"unsafeNetworks": []
|
|
},
|
|
"fingerprint": "<hex>",
|
|
"signature": "<hex>",
|
|
"version": 1
|
|
}
|
|
|
|
$ print-cert -json
|
|
{"details":{"curve":"CURVE25519","groups":[],"isCa":false,"issuer":"<hex>","name":"output-golden","networks":["10.222.0.1/24"],"notAfter":"<time>","notBefore":"<time>","publicKey":"<hex>","unsafeNetworks":[]},"fingerprint":"<hex>","signature":"<hex>","version":1}
|
|
|
|
$ print-cert -pretty
|
|
{
|
|
"details": {
|
|
"curve": "CURVE25519",
|
|
"groups": [],
|
|
"isCa": false,
|
|
"issuer": "<hex>",
|
|
"name": "output-golden",
|
|
"networks": [
|
|
"10.222.0.1/24"
|
|
],
|
|
"notAfter": "<time>",
|
|
"notBefore": "<time>",
|
|
"publicKey": "<hex>",
|
|
"unsafeNetworks": []
|
|
},
|
|
"fingerprint": "<hex>",
|
|
"signature": "<hex>",
|
|
"version": 1
|
|
}
|
|
|
|
$ print-cert -raw
|
|
-----BEGIN NEBULA CERTIFICATE-----
|
|
<pem>
|
|
-----END NEBULA CERTIFICATE-----
|
|
|
|
$ print-cert -json -raw
|
|
{"pem":"-----BEGIN NEBULA CERTIFICATE-----\n<pem>\n-----END NEBULA CERTIFICATE-----\n"}
|
|
|
|
$ print-cert -pretty -raw
|
|
{
|
|
"pem": "-----BEGIN NEBULA CERTIFICATE-----\n<pem>\n-----END NEBULA CERTIFICATE-----\n"
|
|
}
|
|
|
|
$ print-cert 10.222.0.9
|
|
Could not find tunnel for vpn addr: 10.222.0.9
|
|
exit status 1
|
|
|
|
$ print-cert -json 10.222.0.9
|
|
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.9"}
|
|
exit status 1
|
|
|
|
$ print-cert -pretty 10.222.0.9
|
|
{
|
|
"ok": false,
|
|
"reason": "Could not find tunnel for vpn addr: 10.222.0.9"
|
|
}
|
|
exit status 1
|
|
|
|
$ print-cert 10.222.0.9 -json
|
|
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.9"}
|
|
exit status 1
|
|
|
|
$ print-cert -json 10.222.0.9 -json
|
|
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.9"}
|
|
exit status 1
|
|
|
|
$ print-cert -pretty 10.222.0.9 -json
|
|
{
|
|
"ok": false,
|
|
"reason": "Could not find tunnel for vpn addr: 10.222.0.9"
|
|
}
|
|
exit status 1
|
|
|
|
$ print-cert 10.222.0.250
|
|
Could not find tunnel for vpn addr: 10.222.0.250
|
|
exit status 1
|
|
|
|
$ print-cert -json 10.222.0.250
|
|
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.250"}
|
|
exit status 1
|
|
|
|
$ print-cert -pretty 10.222.0.250
|
|
{
|
|
"ok": false,
|
|
"reason": "Could not find tunnel for vpn addr: 10.222.0.250"
|
|
}
|
|
exit status 1
|
|
|
|
$ print-cert not-an-address
|
|
The provided vpn addr could not be parsed: not-an-address
|
|
exit status 1
|
|
|
|
$ print-cert -json not-an-address
|
|
{"ok":false,"reason":"The provided vpn addr could not be parsed: not-an-address"}
|
|
exit status 1
|
|
|
|
$ print-cert -pretty not-an-address
|
|
{
|
|
"ok": false,
|
|
"reason": "The provided vpn addr could not be parsed: not-an-address"
|
|
}
|
|
exit status 1
|
|
|
|
$ whoami
|
|
name: output-golden
|
|
vpn addrs: 10.222.0.1
|
|
networks: 10.222.0.1/24
|
|
unsafe networks:
|
|
groups:
|
|
fingerprint: <hex>
|
|
issuer: <hex>
|
|
not before: <time>
|
|
not after: <time>
|
|
cert version: 1
|
|
|
|
$ whoami -json
|
|
{"name":"output-golden","vpnAddrs":["10.222.0.1"],"networks":["10.222.0.1/24"],"unsafeNetworks":[],"groups":[],"fingerprint":"<hex>","issuer":"<hex>","notBefore":"<time>","notAfter":"<time>","certVersion":1}
|
|
|
|
$ whoami -pretty
|
|
{
|
|
"name": "output-golden",
|
|
"vpnAddrs": [
|
|
"10.222.0.1"
|
|
],
|
|
"networks": [
|
|
"10.222.0.1/24"
|
|
],
|
|
"unsafeNetworks": [],
|
|
"groups": [],
|
|
"fingerprint": "<hex>",
|
|
"issuer": "<hex>",
|
|
"notBefore": "<time>",
|
|
"notAfter": "<time>",
|
|
"certVersion": 1
|
|
}
|
|
|
|
$ whoami x
|
|
whoami takes no arguments
|
|
exit status 1
|
|
|
|
$ whoami -json x
|
|
{"ok":false,"reason":"whoami takes no arguments"}
|
|
exit status 1
|
|
|
|
$ whoami -pretty x
|
|
{
|
|
"ok": false,
|
|
"reason": "whoami takes no arguments"
|
|
}
|
|
exit status 1
|
|
|
|
$ identity
|
|
No vpn addr was provided, use -address <vpn addr>[:port]; whoami prints this node's own identity
|
|
exit status 1
|
|
|
|
$ identity -json
|
|
{"ok":false,"reason":"No vpn addr was provided, use -address \u003cvpn addr\u003e[:port]; whoami prints this node's own identity"}
|
|
exit status 1
|
|
|
|
$ identity -pretty
|
|
{
|
|
"ok": false,
|
|
"reason": "No vpn addr was provided, use -address \u003cvpn addr\u003e[:port]; whoami prints this node's own identity"
|
|
}
|
|
exit status 1
|
|
|
|
$ identity -address 10.222.0.1
|
|
name: output-golden
|
|
vpn addrs: 10.222.0.1
|
|
networks: 10.222.0.1/24
|
|
unsafe networks:
|
|
groups:
|
|
fingerprint: <hex>
|
|
issuer: <hex>
|
|
not before: <time>
|
|
not after: <time>
|
|
cert version: 1
|
|
|
|
$ identity -json -address 10.222.0.1
|
|
{"name":"output-golden","vpnAddrs":["10.222.0.1"],"networks":["10.222.0.1/24"],"unsafeNetworks":[],"groups":[],"fingerprint":"<hex>","issuer":"<hex>","notBefore":"<time>","notAfter":"<time>","certVersion":1}
|
|
|
|
$ identity -pretty -address 10.222.0.1
|
|
{
|
|
"name": "output-golden",
|
|
"vpnAddrs": [
|
|
"10.222.0.1"
|
|
],
|
|
"networks": [
|
|
"10.222.0.1/24"
|
|
],
|
|
"unsafeNetworks": [],
|
|
"groups": [],
|
|
"fingerprint": "<hex>",
|
|
"issuer": "<hex>",
|
|
"notBefore": "<time>",
|
|
"notAfter": "<time>",
|
|
"certVersion": 1
|
|
}
|
|
|
|
$ identity -address 10.222.0.1:4242
|
|
name: output-golden
|
|
vpn addrs: 10.222.0.1
|
|
networks: 10.222.0.1/24
|
|
unsafe networks:
|
|
groups:
|
|
fingerprint: <hex>
|
|
issuer: <hex>
|
|
not before: <time>
|
|
not after: <time>
|
|
cert version: 1
|
|
|
|
$ identity -json -address 10.222.0.1:4242
|
|
{"name":"output-golden","vpnAddrs":["10.222.0.1"],"networks":["10.222.0.1/24"],"unsafeNetworks":[],"groups":[],"fingerprint":"<hex>","issuer":"<hex>","notBefore":"<time>","notAfter":"<time>","certVersion":1}
|
|
|
|
$ identity -pretty -address 10.222.0.1:4242
|
|
{
|
|
"name": "output-golden",
|
|
"vpnAddrs": [
|
|
"10.222.0.1"
|
|
],
|
|
"networks": [
|
|
"10.222.0.1/24"
|
|
],
|
|
"unsafeNetworks": [],
|
|
"groups": [],
|
|
"fingerprint": "<hex>",
|
|
"issuer": "<hex>",
|
|
"notBefore": "<time>",
|
|
"notAfter": "<time>",
|
|
"certVersion": 1
|
|
}
|
|
|
|
$ identity -address 10.222.0.9
|
|
No active tunnel for vpn addr: 10.222.0.9
|
|
exit status 1
|
|
|
|
$ identity -json -address 10.222.0.9
|
|
{"ok":false,"reason":"No active tunnel for vpn addr: 10.222.0.9"}
|
|
exit status 1
|
|
|
|
$ identity -pretty -address 10.222.0.9
|
|
{
|
|
"ok": false,
|
|
"reason": "No active tunnel for vpn addr: 10.222.0.9"
|
|
}
|
|
exit status 1
|
|
|
|
$ identity -address not-an-address
|
|
The provided vpn addr could not be parsed: not-an-address
|
|
exit status 1
|
|
|
|
$ identity -json -address not-an-address
|
|
{"ok":false,"reason":"The provided vpn addr could not be parsed: not-an-address"}
|
|
exit status 1
|
|
|
|
$ identity -pretty -address not-an-address
|
|
{
|
|
"ok": false,
|
|
"reason": "The provided vpn addr could not be parsed: not-an-address"
|
|
}
|
|
exit status 1
|
|
|
|
$ identity -address
|
|
The provided vpn addr could not be parsed:
|
|
exit status 1
|
|
|
|
$ identity -json -address
|
|
{"ok":false,"reason":"The provided vpn addr could not be parsed: "}
|
|
exit status 1
|
|
|
|
$ identity -pretty -address
|
|
{
|
|
"ok": false,
|
|
"reason": "The provided vpn addr could not be parsed: "
|
|
}
|
|
exit status 1
|
|
|
|
$ identity 10.222.0.9
|
|
identity takes the vpn addr as -address, not as an operand: identity -address 10.222.0.9
|
|
exit status 1
|
|
|
|
$ identity -json 10.222.0.9
|
|
{"ok":false,"reason":"identity takes the vpn addr as -address, not as an operand: identity -address 10.222.0.9"}
|
|
exit status 1
|
|
|
|
$ identity -pretty 10.222.0.9
|
|
{
|
|
"ok": false,
|
|
"reason": "identity takes the vpn addr as -address, not as an operand: identity -address 10.222.0.9"
|
|
}
|
|
exit status 1
|
|
|
|
$ print-tunnel
|
|
No vpn address was provided
|
|
exit status 1
|
|
|
|
$ print-tunnel -json
|
|
{"ok":false,"reason":"No vpn address was provided"}
|
|
exit status 1
|
|
|
|
$ print-tunnel -pretty
|
|
{
|
|
"ok": false,
|
|
"reason": "No vpn address was provided"
|
|
}
|
|
exit status 1
|
|
|
|
$ print-tunnel 10.222.0.9
|
|
Could not find tunnel for vpn addr: 10.222.0.9
|
|
exit status 1
|
|
|
|
$ print-tunnel -json 10.222.0.9
|
|
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.9"}
|
|
exit status 1
|
|
|
|
$ print-tunnel -pretty 10.222.0.9
|
|
{
|
|
"ok": false,
|
|
"reason": "Could not find tunnel for vpn addr: 10.222.0.9"
|
|
}
|
|
exit status 1
|
|
|
|
$ print-tunnel 10.222.0.250
|
|
Could not find tunnel for vpn addr: 10.222.0.250
|
|
exit status 1
|
|
|
|
$ print-tunnel -json 10.222.0.250
|
|
{"ok":false,"reason":"Could not find tunnel for vpn addr: 10.222.0.250"}
|
|
exit status 1
|
|
|
|
$ print-tunnel -pretty 10.222.0.250
|
|
{
|
|
"ok": false,
|
|
"reason": "Could not find tunnel for vpn addr: 10.222.0.250"
|
|
}
|
|
exit status 1
|
|
|
|
$ print-relays
|
|
{"Relays":null}
|
|
|
|
$ print-relays -json
|
|
{"Relays":null}
|
|
|
|
$ print-relays -pretty
|
|
{
|
|
"Relays": null
|
|
}
|
|
|
|
$ query-lighthouse
|
|
No vpn address was provided
|
|
exit status 1
|
|
|
|
$ query-lighthouse -json
|
|
{"ok":false,"reason":"No vpn address was provided"}
|
|
exit status 1
|
|
|
|
$ query-lighthouse -pretty
|
|
{
|
|
"ok": false,
|
|
"reason": "No vpn address was provided"
|
|
}
|
|
exit status 1
|
|
|
|
$ query-lighthouse 10.222.0.9
|
|
{}
|
|
|
|
$ query-lighthouse -json 10.222.0.9
|
|
{}
|
|
|
|
$ query-lighthouse -pretty 10.222.0.9
|
|
{}
|
|
|
|
$ query-lighthouse not-an-address
|
|
The provided vpn address could not be parsed: not-an-address
|
|
exit status 1
|
|
|
|
$ query-lighthouse -json not-an-address
|
|
{"ok":false,"reason":"The provided vpn address could not be parsed: not-an-address"}
|
|
exit status 1
|
|
|
|
$ query-lighthouse -pretty not-an-address
|
|
{
|
|
"ok": false,
|
|
"reason": "The provided vpn address could not be parsed: not-an-address"
|
|
}
|
|
exit status 1
|
|
|
|
$ log-level
|
|
Log level is not reconfigurable on this logger
|
|
exit status 1
|
|
|
|
$ log-level -json
|
|
{"ok":false,"reason":"Log level is not reconfigurable on this logger"}
|
|
exit status 1
|
|
|
|
$ log-level -pretty
|
|
{
|
|
"ok": false,
|
|
"reason": "Log level is not reconfigurable on this logger"
|
|
}
|
|
exit status 1
|
|
|
|
$ log-level debug
|
|
Log level is not reconfigurable on this logger
|
|
exit status 1
|
|
|
|
$ log-level -json debug
|
|
{"ok":false,"reason":"Log level is not reconfigurable on this logger"}
|
|
exit status 1
|
|
|
|
$ log-level -pretty debug
|
|
{
|
|
"ok": false,
|
|
"reason": "Log level is not reconfigurable on this logger"
|
|
}
|
|
exit status 1
|
|
|
|
$ log-level bogus
|
|
Log level is not reconfigurable on this logger
|
|
exit status 1
|
|
|
|
$ log-level -json bogus
|
|
{"ok":false,"reason":"Log level is not reconfigurable on this logger"}
|
|
exit status 1
|
|
|
|
$ log-level -pretty bogus
|
|
{
|
|
"ok": false,
|
|
"reason": "Log level is not reconfigurable on this logger"
|
|
}
|
|
exit status 1
|
|
|
|
$ log-level info
|
|
Log level is not reconfigurable on this logger
|
|
exit status 1
|
|
|
|
$ log-level -json info
|
|
{"ok":false,"reason":"Log level is not reconfigurable on this logger"}
|
|
exit status 1
|
|
|
|
$ log-level -pretty info
|
|
{
|
|
"ok": false,
|
|
"reason": "Log level is not reconfigurable on this logger"
|
|
}
|
|
exit status 1
|
|
|
|
$ log-format
|
|
Log format is not reconfigurable on this logger
|
|
exit status 1
|
|
|
|
$ log-format -json
|
|
{"ok":false,"reason":"Log format is not reconfigurable on this logger"}
|
|
exit status 1
|
|
|
|
$ log-format -pretty
|
|
{
|
|
"ok": false,
|
|
"reason": "Log format is not reconfigurable on this logger"
|
|
}
|
|
exit status 1
|
|
|
|
$ log-format json
|
|
Log format is not reconfigurable on this logger
|
|
exit status 1
|
|
|
|
$ log-format -json json
|
|
{"ok":false,"reason":"Log format is not reconfigurable on this logger"}
|
|
exit status 1
|
|
|
|
$ log-format -pretty json
|
|
{
|
|
"ok": false,
|
|
"reason": "Log format is not reconfigurable on this logger"
|
|
}
|
|
exit status 1
|
|
|
|
$ log-format text
|
|
Log format is not reconfigurable on this logger
|
|
exit status 1
|
|
|
|
$ log-format -json text
|
|
{"ok":false,"reason":"Log format is not reconfigurable on this logger"}
|
|
exit status 1
|
|
|
|
$ log-format -pretty text
|
|
{
|
|
"ok": false,
|
|
"reason": "Log format is not reconfigurable on this logger"
|
|
}
|
|
exit status 1
|
|
|
|
$ change-remote
|
|
No vpn address was provided
|
|
exit status 1
|
|
|
|
$ change-remote -json
|
|
{"ok":false,"reason":"No vpn address was provided"}
|
|
exit status 1
|
|
|
|
$ change-remote -pretty
|
|
{
|
|
"ok": false,
|
|
"reason": "No vpn address was provided"
|
|
}
|
|
exit status 1
|
|
|
|
$ change-remote 10.222.0.9
|
|
No address was provided
|
|
exit status 1
|
|
|
|
$ change-remote -json 10.222.0.9
|
|
{"ok":false,"reason":"No address was provided"}
|
|
exit status 1
|
|
|
|
$ change-remote -pretty 10.222.0.9
|
|
{
|
|
"ok": false,
|
|
"reason": "No address was provided"
|
|
}
|
|
exit status 1
|
|
|
|
$ change-remote -address 10.94.0.10:4242 10.222.0.9
|
|
Could not find tunnel for vpn address: 10.222.0.9
|
|
exit status 1
|
|
|
|
$ change-remote -json -address 10.94.0.10:4242 10.222.0.9
|
|
{"ok":false,"reason":"Could not find tunnel for vpn address: 10.222.0.9"}
|
|
exit status 1
|
|
|
|
$ change-remote -pretty -address 10.94.0.10:4242 10.222.0.9
|
|
{
|
|
"ok": false,
|
|
"reason": "Could not find tunnel for vpn address: 10.222.0.9"
|
|
}
|
|
exit status 1
|
|
|
|
$ change-remote -address 10.94.0.10:4242 10.222.0.250
|
|
Could not find tunnel for vpn address: 10.222.0.250
|
|
exit status 1
|
|
|
|
$ change-remote -json -address 10.94.0.10:4242 10.222.0.250
|
|
{"ok":false,"reason":"Could not find tunnel for vpn address: 10.222.0.250"}
|
|
exit status 1
|
|
|
|
$ change-remote -pretty -address 10.94.0.10:4242 10.222.0.250
|
|
{
|
|
"ok": false,
|
|
"reason": "Could not find tunnel for vpn address: 10.222.0.250"
|
|
}
|
|
exit status 1
|
|
|
|
$ create-tunnel
|
|
No vpn address was provided
|
|
exit status 1
|
|
|
|
$ create-tunnel -json
|
|
{"ok":false,"reason":"No vpn address was provided"}
|
|
exit status 1
|
|
|
|
$ create-tunnel -pretty
|
|
{
|
|
"ok": false,
|
|
"reason": "No vpn address was provided"
|
|
}
|
|
exit status 1
|
|
|
|
$ create-tunnel 10.222.0.9
|
|
Tunnel already handshaking
|
|
exit status 1
|
|
|
|
$ create-tunnel -json 10.222.0.9
|
|
{"ok":false,"reason":"Tunnel already handshaking"}
|
|
exit status 1
|
|
|
|
$ create-tunnel -pretty 10.222.0.9
|
|
{
|
|
"ok": false,
|
|
"reason": "Tunnel already handshaking"
|
|
}
|
|
exit status 1
|
|
|
|
$ create-tunnel -address 10.94.0.10:4242 10.222.0.10
|
|
Created
|
|
|
|
$ create-tunnel -json -address 10.94.0.10:4242 10.222.0.10
|
|
{"ok":false,"reason":"Tunnel already handshaking"}
|
|
exit status 1
|
|
|
|
$ create-tunnel -pretty -address 10.94.0.10:4242 10.222.0.10
|
|
{
|
|
"ok": false,
|
|
"reason": "Tunnel already handshaking"
|
|
}
|
|
exit status 1
|
|
|
|
$ create-tunnel not-an-address
|
|
The provided vpn address could not be parsed: not-an-address
|
|
exit status 1
|
|
|
|
$ create-tunnel -json not-an-address
|
|
{"ok":false,"reason":"The provided vpn address could not be parsed: not-an-address"}
|
|
exit status 1
|
|
|
|
$ create-tunnel -pretty not-an-address
|
|
{
|
|
"ok": false,
|
|
"reason": "The provided vpn address could not be parsed: not-an-address"
|
|
}
|
|
exit status 1
|
|
|
|
$ close-tunnel
|
|
No vpn address was provided
|
|
exit status 1
|
|
|
|
$ close-tunnel -json
|
|
{"ok":false,"reason":"No vpn address was provided"}
|
|
exit status 1
|
|
|
|
$ close-tunnel -pretty
|
|
{
|
|
"ok": false,
|
|
"reason": "No vpn address was provided"
|
|
}
|
|
exit status 1
|
|
|
|
$ close-tunnel 10.222.0.250
|
|
Could not find tunnel for vpn address: 10.222.0.250
|
|
exit status 1
|
|
|
|
$ close-tunnel -json 10.222.0.250
|
|
{"ok":false,"reason":"Could not find tunnel for vpn address: 10.222.0.250"}
|
|
exit status 1
|
|
|
|
$ close-tunnel -pretty 10.222.0.250
|
|
{
|
|
"ok": false,
|
|
"reason": "Could not find tunnel for vpn address: 10.222.0.250"
|
|
}
|
|
exit status 1
|
|
|
|
$ close-tunnel not-an-address
|
|
The provided vpn address could not be parsed: not-an-address
|
|
exit status 1
|
|
|
|
$ close-tunnel -json not-an-address
|
|
{"ok":false,"reason":"The provided vpn address could not be parsed: not-an-address"}
|
|
exit status 1
|
|
|
|
$ close-tunnel -pretty not-an-address
|
|
{
|
|
"ok": false,
|
|
"reason": "The provided vpn address could not be parsed: not-an-address"
|
|
}
|
|
exit status 1
|
|
|
|
$ help
|
|
Available commands:
|
|
change-remote - Changes the remote address used in the tunnel for the provided vpn addr
|
|
close-tunnel - Closes a tunnel for the provided vpn addr
|
|
create-tunnel - Creates a tunnel for the provided vpn address
|
|
device-info - Prints information about the network device.
|
|
help - prints available commands or help <command> for specific usage info
|
|
identity - Prints the certificate identity of the host owning the provided vpn addr
|
|
list-hostmap - List all known previously connected hosts
|
|
list-lighthouse-addrmap - List all lighthouse map entries
|
|
list-pending-hostmap - List all handshaking hosts
|
|
log-format - Gets or sets the current log format
|
|
log-level - Gets or sets the current log level
|
|
logout - Ends the current session
|
|
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
|
|
print-relays - Prints json details about all relay info
|
|
print-tunnel - Prints json details about a tunnel for the provided vpn addr
|
|
query-lighthouse - Query the lighthouses for the provided vpn address
|
|
reload - Reloads configuration from disk, same as sending HUP to the process
|
|
version - Prints the currently running version of nebula
|
|
whoami - Prints the certificate identity of this node
|
|
|
|
|
|
$ help -json
|
|
[{"name":"change-remote","short":"Changes the remote address used in the tunnel for the provided vpn addr","flags":[{"name":"address","usage":"The new remote address, ip:port"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"close-tunnel","short":"Closes a tunnel for the provided vpn addr","flags":[{"name":"local-only","bool":true,"default":"false","usage":"Disables notifying the remote that the tunnel is shutting down"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"create-tunnel","short":"Creates a tunnel for the provided vpn address","help":"The lighthouses will be queried for real addresses but you can provide one as well.","flags":[{"name":"address","usage":"Optionally provide a real remote address, ip:port "},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"device-info","short":"Prints information about the network device.","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"help","short":"prints available commands or help \u003ccommand\u003e for specific usage info","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"identity","short":"Prints the certificate identity of the host owning the provided vpn addr","help":"Identity is what the certificate says: name, vpn addrs, networks, groups, fingerprint, issuer and validity. The address may carry a port, so a connection's remote address can be passed through as is. For this node's own identity use whoami.","flags":[{"name":"address","usage":"The vpn addr to look up, optionally with a port"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"list-hostmap","short":"List all known previously connected hosts","flags":[{"name":"by-index","bool":true,"default":"false","usage":"gets all hosts in the hostmap from the index table"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"list-lighthouse-addrmap","short":"List all lighthouse map entries","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"list-pending-hostmap","short":"List all handshaking hosts","flags":[{"name":"by-index","bool":true,"default":"false","usage":"gets all hosts in the hostmap from the index table"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"log-format","short":"Gets or sets the current log format","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"log-level","short":"Gets or sets the current log level","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"logout","short":"Ends the current session","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"print-cert","short":"Prints the current certificate being used or the certificate for the provided vpn addr","help":"The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.","flags":[{"name":"address","usage":"The vpn addr to look up, optionally with a port"},{"name":"raw","bool":true,"default":"false","usage":"prints the PEM encoded certificate; with -json, an object holding it"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"print-relays","short":"Prints json details about all relay info","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"print-tunnel","short":"Prints json details about a tunnel for the provided vpn addr","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"query-lighthouse","short":"Query the lighthouses for the provided vpn address","help":"This command is asynchronous. Only currently known udp addresses will be printed.","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"reload","short":"Reloads configuration from disk, same as sending HUP to the process","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"version","short":"Prints the currently running version of nebula","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]},{"name":"whoami","short":"Prints the certificate identity of this node","help":"The fields identity prints, read from this node's own certificate.","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]}]
|
|
|
|
$ help -pretty
|
|
[
|
|
{
|
|
"name": "change-remote",
|
|
"short": "Changes the remote address used in the tunnel for the provided vpn addr",
|
|
"flags": [
|
|
{
|
|
"name": "address",
|
|
"usage": "The new remote address, ip:port"
|
|
},
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "close-tunnel",
|
|
"short": "Closes a tunnel for the provided vpn addr",
|
|
"flags": [
|
|
{
|
|
"name": "local-only",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "Disables notifying the remote that the tunnel is shutting down"
|
|
},
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "create-tunnel",
|
|
"short": "Creates a tunnel for the provided vpn address",
|
|
"help": "The lighthouses will be queried for real addresses but you can provide one as well.",
|
|
"flags": [
|
|
{
|
|
"name": "address",
|
|
"usage": "Optionally provide a real remote address, ip:port "
|
|
},
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "device-info",
|
|
"short": "Prints information about the network device.",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "help",
|
|
"short": "prints available commands or help \u003ccommand\u003e for specific usage info",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "identity",
|
|
"short": "Prints the certificate identity of the host owning the provided vpn addr",
|
|
"help": "Identity is what the certificate says: name, vpn addrs, networks, groups, fingerprint, issuer and validity. The address may carry a port, so a connection's remote address can be passed through as is. For this node's own identity use whoami.",
|
|
"flags": [
|
|
{
|
|
"name": "address",
|
|
"usage": "The vpn addr to look up, optionally with a port"
|
|
},
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "list-hostmap",
|
|
"short": "List all known previously connected hosts",
|
|
"flags": [
|
|
{
|
|
"name": "by-index",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "gets all hosts in the hostmap from the index table"
|
|
},
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "list-lighthouse-addrmap",
|
|
"short": "List all lighthouse map entries",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "list-pending-hostmap",
|
|
"short": "List all handshaking hosts",
|
|
"flags": [
|
|
{
|
|
"name": "by-index",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "gets all hosts in the hostmap from the index table"
|
|
},
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "log-format",
|
|
"short": "Gets or sets the current log format",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "log-level",
|
|
"short": "Gets or sets the current log level",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "logout",
|
|
"short": "Ends the current session",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "print-cert",
|
|
"short": "Prints the current certificate being used or the certificate for the provided vpn addr",
|
|
"help": "The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.",
|
|
"flags": [
|
|
{
|
|
"name": "address",
|
|
"usage": "The vpn addr to look up, optionally with a port"
|
|
},
|
|
{
|
|
"name": "raw",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "prints the PEM encoded certificate; with -json, an object holding it"
|
|
},
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "print-relays",
|
|
"short": "Prints json details about all relay info",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "print-tunnel",
|
|
"short": "Prints json details about a tunnel for the provided vpn addr",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "query-lighthouse",
|
|
"short": "Query the lighthouses for the provided vpn address",
|
|
"help": "This command is asynchronous. Only currently known udp addresses will be printed.",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "reload",
|
|
"short": "Reloads configuration from disk, same as sending HUP to the process",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "version",
|
|
"short": "Prints the currently running version of nebula",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"name": "whoami",
|
|
"short": "Prints the certificate identity of this node",
|
|
"help": "The fields identity prints, read from this node's own certificate.",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
|
|
$ help print-cert
|
|
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
|
|
The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.
|
|
-address string
|
|
The vpn addr to look up, optionally with a port
|
|
-raw
|
|
prints the PEM encoded certificate; with -json, an object holding it
|
|
-json
|
|
outputs as json
|
|
-pretty
|
|
pretty prints json, assumes -json
|
|
|
|
$ help -json print-cert
|
|
{"name":"print-cert","short":"Prints the current certificate being used or the certificate for the provided vpn addr","help":"The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.","flags":[{"name":"address","usage":"The vpn addr to look up, optionally with a port"},{"name":"raw","bool":true,"default":"false","usage":"prints the PEM encoded certificate; with -json, an object holding it"},{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]}
|
|
|
|
$ help -pretty print-cert
|
|
{
|
|
"name": "print-cert",
|
|
"short": "Prints the current certificate being used or the certificate for the provided vpn addr",
|
|
"help": "The vpn addr is an operand or -address, which may carry a port so a connection's remote address can be passed through as is. For a peer it is the certificate nebula verified when the tunnel came up; with no address it is this node's own, the v2 certificate when both versions are loaded. -raw prints the PEM.",
|
|
"flags": [
|
|
{
|
|
"name": "address",
|
|
"usage": "The vpn addr to look up, optionally with a port"
|
|
},
|
|
{
|
|
"name": "raw",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "prints the PEM encoded certificate; with -json, an object holding it"
|
|
},
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
}
|
|
|
|
$ help logout
|
|
logout - Ends the current session
|
|
-json
|
|
outputs as json
|
|
-pretty
|
|
pretty prints json, assumes -json
|
|
|
|
$ help -json logout
|
|
{"name":"logout","short":"Ends the current session","flags":[{"name":"json","bool":true,"default":"false","usage":"outputs as json"},{"name":"pretty","bool":true,"default":"false","usage":"pretty prints json, assumes -json"}]}
|
|
|
|
$ help -pretty logout
|
|
{
|
|
"name": "logout",
|
|
"short": "Ends the current session",
|
|
"flags": [
|
|
{
|
|
"name": "json",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "outputs as json"
|
|
},
|
|
{
|
|
"name": "pretty",
|
|
"bool": true,
|
|
"default": "false",
|
|
"usage": "pretty prints json, assumes -json"
|
|
}
|
|
]
|
|
}
|
|
|
|
$ logout -h
|
|
logout - Ends the current session
|
|
-json
|
|
outputs as json
|
|
-pretty
|
|
pretty prints json, assumes -json
|
|
|
|
$ logout -json -h
|
|
logout - Ends the current session
|
|
-json
|
|
outputs as json
|
|
-pretty
|
|
pretty prints json, assumes -json
|
|
|
|
$ logout -pretty -h
|
|
logout - Ends the current session
|
|
-json
|
|
outputs as json
|
|
-pretty
|
|
pretty prints json, assumes -json
|
|
|
|
$ not-a-command 10.222.0.9
|
|
did not understand: not-a-command
|
|
Available commands:
|
|
change-remote - Changes the remote address used in the tunnel for the provided vpn addr
|
|
close-tunnel - Closes a tunnel for the provided vpn addr
|
|
create-tunnel - Creates a tunnel for the provided vpn address
|
|
device-info - Prints information about the network device.
|
|
help - prints available commands or help <command> for specific usage info
|
|
identity - Prints the certificate identity of the host owning the provided vpn addr
|
|
list-hostmap - List all known previously connected hosts
|
|
list-lighthouse-addrmap - List all lighthouse map entries
|
|
list-pending-hostmap - List all handshaking hosts
|
|
log-format - Gets or sets the current log format
|
|
log-level - Gets or sets the current log level
|
|
logout - Ends the current session
|
|
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
|
|
print-relays - Prints json details about all relay info
|
|
print-tunnel - Prints json details about a tunnel for the provided vpn addr
|
|
query-lighthouse - Query the lighthouses for the provided vpn address
|
|
reload - Reloads configuration from disk, same as sending HUP to the process
|
|
version - Prints the currently running version of nebula
|
|
whoami - Prints the certificate identity of this node
|
|
|
|
exit status 1
|
|
|
|
$ not-a-command -json 10.222.0.9
|
|
did not understand: not-a-command
|
|
Available commands:
|
|
change-remote - Changes the remote address used in the tunnel for the provided vpn addr
|
|
close-tunnel - Closes a tunnel for the provided vpn addr
|
|
create-tunnel - Creates a tunnel for the provided vpn address
|
|
device-info - Prints information about the network device.
|
|
help - prints available commands or help <command> for specific usage info
|
|
identity - Prints the certificate identity of the host owning the provided vpn addr
|
|
list-hostmap - List all known previously connected hosts
|
|
list-lighthouse-addrmap - List all lighthouse map entries
|
|
list-pending-hostmap - List all handshaking hosts
|
|
log-format - Gets or sets the current log format
|
|
log-level - Gets or sets the current log level
|
|
logout - Ends the current session
|
|
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
|
|
print-relays - Prints json details about all relay info
|
|
print-tunnel - Prints json details about a tunnel for the provided vpn addr
|
|
query-lighthouse - Query the lighthouses for the provided vpn address
|
|
reload - Reloads configuration from disk, same as sending HUP to the process
|
|
version - Prints the currently running version of nebula
|
|
whoami - Prints the certificate identity of this node
|
|
|
|
exit status 1
|
|
|
|
$ not-a-command -pretty 10.222.0.9
|
|
did not understand: not-a-command
|
|
Available commands:
|
|
change-remote - Changes the remote address used in the tunnel for the provided vpn addr
|
|
close-tunnel - Closes a tunnel for the provided vpn addr
|
|
create-tunnel - Creates a tunnel for the provided vpn address
|
|
device-info - Prints information about the network device.
|
|
help - prints available commands or help <command> for specific usage info
|
|
identity - Prints the certificate identity of the host owning the provided vpn addr
|
|
list-hostmap - List all known previously connected hosts
|
|
list-lighthouse-addrmap - List all lighthouse map entries
|
|
list-pending-hostmap - List all handshaking hosts
|
|
log-format - Gets or sets the current log format
|
|
log-level - Gets or sets the current log level
|
|
logout - Ends the current session
|
|
print-cert - Prints the current certificate being used or the certificate for the provided vpn addr
|
|
print-relays - Prints json details about all relay info
|
|
print-tunnel - Prints json details about a tunnel for the provided vpn addr
|
|
query-lighthouse - Query the lighthouses for the provided vpn address
|
|
reload - Reloads configuration from disk, same as sending HUP to the process
|
|
version - Prints the currently running version of nebula
|
|
whoami - Prints the certificate identity of this node
|
|
|
|
exit status 1
|
|
|
|
$ reload
|
|
Reloading config
|
|
Config reload failed, the new config did not load: no config files found at
|
|
exit status 1
|
|
|
|
$ reload -json
|
|
{"ok":false,"reason":"Config reload failed, the new config did not load: no config files found at "}
|
|
exit status 1
|
|
|
|
$ reload -pretty
|
|
{
|
|
"ok": false,
|
|
"reason": "Config reload failed, the new config did not load: no config files found at "
|
|
}
|
|
exit status 1
|
|
|