You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Brad Fitzpatrick 150cd30b1d ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation
We previously baked in the LetsEncrypt x509 root CA for our tlsdial
package.

This moves that out into a new "bakedroots" package and is now also
shared by ipn/ipnlocal's cert validation code (validCertPEM) that
decides whether it's time to fetch a new cert.

Otherwise, a machine without LetsEncrypt roots locally in its system
roots is unable to use tailscale cert/serve and fetch certs.

Fixes #14690

Change-Id: Ic88b3bdaabe25d56b9ff07ada56a27e3f11d7159
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
11 months ago
..
conffile ipn/conffile: don't depend on hujson on iOS/Android 1 year ago
ipnauth ipn/{ipnauth,ipnlocal,ipnserver}, client/tailscale: make ipnserver.Server testable 11 months ago
ipnlocal ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation 11 months ago
ipnserver ipn/ipnserver: fix a deadlock in (*Server).blockWhileIdentityInUse 11 months ago
ipnstate all: illumos/solaris userspace only support 11 months ago
localapi util/uniq,types/lazy,*: delete code that's now in Go std 11 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 2 years ago
store kube/{kubeapi,kubeclient},ipn/store/kubestore,cmd/{containerboot,k8s-operator}: emit kube store Events (#14112) 1 year ago
backend.go ipn: declare NotifyWatchOpt consts without using iota 11 months ago
conf.go ipn/conf.go: add VIPServices to tailscaled configfile (#14345) 11 months ago
doc.go IPN: Update ServeConfig to accept configuration for Services. 1 year ago
ipn_clone.go IPN: Update ServeConfig to accept configuration for Services. 1 year ago
ipn_test.go all: do not depend on the testing package 2 years ago
ipn_view.go cmd/viewer,all: consistently use "read-only" instead of "readonly" 11 months ago
prefs.go cmd/tailscale,ipn,tailcfg: add `tailscale advertise` subcommand behind envknob (#13734) 1 year ago
prefs_test.go cmd/tailscale,ipn,tailcfg: add `tailscale advertise` subcommand behind envknob (#13734) 1 year ago
serve.go ipn: [serve] warn that foreground funnel won't work if shields are up (#14685) 11 months ago
serve_test.go ipn: [serve] warn that foreground funnel won't work if shields are up (#14685) 11 months ago
store.go ipn: add comment about thread-safety to StateStore 2 years ago
store_test.go ipn: avoid useless no-op WriteState calls 2 years ago