Commit Graph

5 Commits (release-branch/1.92)

Author SHA1 Message Date
Andrew Lytvynov 6f3d1881a8
Fix hardware key attestation support (#715)
Enable attestation key by default, any enforcement happens in control.
Also, make the HashMap for tracking loaded keys in HardwareKeyStore a
singleton, so that multiple instances of HardwareKeyStore created in
App.kt don't lose the state of the loaded keys.

Updates https://github.com/tailscale/tailscale/issues/15830

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
3 weeks ago
Andrew Lytvynov 588639e495
go.mod: bump OSS (#708)
Updates https://github.com/tailscale/tailscale/issues/15830

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
2 months ago
Patrick O'Doherty c7cc272eba
android,libtailscale: allow toggling HW attestation via MDM (#709)
Previously hardware attestation was enabled on all supported devices.
We now gate this functionality behind an MDM setting (whose default
value is true) to allow disabling this in deployments where it
might cause issues.

Updates tailscale/corp#31269

OSS and Version updated to 1.89.254-t005e264b5-g0b32dd75c

Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>
Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
2 months ago
Nick Khyl 4b2b827be1 android: bump OSS
OSS and Version updated to 1.89.129-t7bcab4ab2-g7751f2a4a

Updates tailscale/corp#31269 (for (*hardwareAttestationKey).Clone)
Updates tailscale/tailscale#15160 (for the tsd / HealthTracker change)

Signed-off-by: Nick Khyl <nickk@tailscale.com>
2 months ago
Andrew Lytvynov 11869b00c5
android,libtailscale: implement key.HardwareAttestationKey (#694)
Use a KeyStore-backed key to store a hardware-bound private key.

Updates https://github.com/tailscale/tailscale/issues/15830

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
3 months ago