You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn/ipnlocal
Anton Tolchanov fd6686d81a tka: truncate long rotation signature chains
When a rotation signature chain reaches a certain size, remove the
oldest rotation signature from the chain before wrapping it in a new
rotation signature.

Since all previous rotation signatures are signed by the same wrapping
pubkey (node's own tailnet lock key), the node can re-construct the
chain, re-signing previous rotation signatures. This will satisfy the
existing certificate validation logic.

Updates #13185

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
3 months ago
..
testdata
autoupdate.go
autoupdate_disabled.go
breaktcp_darwin.go
breaktcp_linux.go
c2n.go
c2n_pprof.go
c2n_test.go
cert.go
cert_js.go
cert_test.go
dnsconfig_test.go
drive.go
expiry.go
expiry_test.go
local.go
local_test.go
loglines_test.go
network-lock.go
network-lock_test.go
peerapi.go
peerapi_h2c.go
peerapi_macios_ext.go
peerapi_test.go
profiles.go
profiles_notwindows.go
profiles_test.go
profiles_windows.go
serve.go
serve_test.go
ssh.go
ssh_stub.go
ssh_test.go
state_test.go
taildrop.go
web_client.go
web_client_stub.go