You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Anton Tolchanov 32120932a5 cmd/tailscale/cli: print node signature in `tailscale lock status`
- Add current node signature to `ipnstate.NetworkLockStatus`;
- Print current node signature in a human-friendly format as part
  of `tailscale lock status`.

Examples:

```
$ tailscale lock status
Tailnet lock is ENABLED.

This node is accessible under tailnet lock. Node signature:
SigKind: direct
Pubkey: [OTB3a]
KeyID: tlpub:44a0e23cd53a4b8acc02f6732813d8f5ba8b35d02d48bf94c9f1724ebe31c943
WrappingPubkey: tlpub:44a0e23cd53a4b8acc02f6732813d8f5ba8b35d02d48bf94c9f1724ebe31c943

This node's tailnet-lock key: tlpub:44a0e23cd53a4b8acc02f6732813d8f5ba8b35d02d48bf94c9f1724ebe31c943

Trusted signing keys:
	tlpub:44a0e23cd53a4b8acc02f6732813d8f5ba8b35d02d48bf94c9f1724ebe31c943	1	(self)
	tlpub:6fa21d242a202b290de85926ba3893a6861888679a73bc3a43f49539d67c9764	1	(pre-auth key kq3NzejWoS11KTM59)
```

For a node created via a signed auth key:

```
This node is accessible under tailnet lock. Node signature:
SigKind: rotation
Pubkey: [e3nAO]
Nested:
  SigKind: credential
  KeyID: tlpub:6fa21d242a202b290de85926ba3893a6861888679a73bc3a43f49539d67c9764
  WrappingPubkey: tlpub:3623b0412cab0029cb1918806435709b5947ae03554050f20caf66629f21220a
```

For a node that rotated its key a few times:

```
This node is accessible under tailnet lock. Node signature:
SigKind: rotation
Pubkey: [DOzL4]
Nested:
  SigKind: rotation
  Pubkey: [S/9yU]
  Nested:
    SigKind: rotation
    Pubkey: [9E9v4]
    Nested:
      SigKind: direct
      Pubkey: [3QHTJ]
      KeyID: tlpub:44a0e23cd53a4b8acc02f6732813d8f5ba8b35d02d48bf94c9f1724ebe31c943
      WrappingPubkey: tlpub:2faa280025d3aba0884615f710d8c50590b052c01a004c2b4c2c9434702ae9d0
```

Updates tailscale/corp#19764

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
4 months ago
..
conffile cmd/tailscaled, ipn/conffile: support ec2 user-data config file 4 months ago
ipnauth go.mod, all: move away from inet.af domain seized by Taliban 7 months ago
ipnlocal cmd/tailscale/cli: print node signature in `tailscale lock status` 4 months ago
ipnserver ipn/ipnserver: close a small race in ipnserver, ~simplify code 5 months ago
ipnstate cmd/tailscale/cli: print node signature in `tailscale lock status` 4 months ago
localapi ipn/ipnlocal, all: plumb health trackers in tests 5 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 11 months ago
store cmd/containerboot,kube,ipn/store/kubestore: allow interactive login on kube, check Secret create perms, allow empty state Secret (#11326) 5 months ago
backend.go ipn: remove unused Options.LegacyMigrationPrefs 5 months ago
conf.go cmd/k8s-operator,cmd/containerboot,ipn,k8s-operator: turn off stateful filter for egress proxies. (#12075) 4 months ago
doc.go all: update copyright and license headers 2 years ago
ipn_clone.go ipn,wgengine: remove vestigial Prefs.AllowSingleHosts 4 months ago
ipn_test.go all: do not depend on the testing package 4 months ago
ipn_view.go ipn,wgengine: remove vestigial Prefs.AllowSingleHosts 4 months ago
prefs.go various: disable stateful filtering by default (#12197) 4 months ago
prefs_test.go ipn,wgengine: remove vestigial Prefs.AllowSingleHosts 4 months ago
serve.go serve.go, tsnet.go: Fix "in in" typo (#12279) 4 months ago
serve_test.go {ipn/serve,cmd/tailscale/cli}: move some shared funcs to ipn 7 months ago
store.go ipn: add comment about thread-safety to StateStore 7 months ago
store_test.go ipn: avoid useless no-op WriteState calls 1 year ago