You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn/ipnlocal
Anton Tolchanov fd6686d81a tka: truncate long rotation signature chains
When a rotation signature chain reaches a certain size, remove the
oldest rotation signature from the chain before wrapping it in a new
rotation signature.

Since all previous rotation signatures are signed by the same wrapping
pubkey (node's own tailnet lock key), the node can re-construct the
chain, re-signing previous rotation signatures. This will satisfy the
existing certificate validation logic.

Updates #13185

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
2 months ago
..
testdata
autoupdate.go clientupdate: return true for CanAutoUpdate for macsys (#12746) 4 months ago
autoupdate_disabled.go ipn/ipnlocal: periodically run auto-updates when "offline" (#12118) 5 months ago
breaktcp_darwin.go
breaktcp_linux.go
c2n.go posture: add network hardware addresses to posture identity 4 months ago
c2n_pprof.go ipn/ipnlocal: add c2n /debug/pprof/allocs endpoint 7 months ago
c2n_test.go util/cmpx: delete now that we're using Go 1.22 9 months ago
cert.go cmd/tailscale: add --min-validity flag to the cert command (#12822) 4 months ago
cert_js.go ipn/ipnlocal: add c2n method to check on TLS cert fetch status 12 months ago
cert_test.go
dnsconfig_test.go util/cmpx: delete now that we're using Go 1.22 9 months ago
drive.go ipn/ipnlocal: refactor and cleanup profileManager 2 months ago
expiry.go ssh/tailssh: use control server time instead of local time 12 months ago
expiry_test.go
local.go cli: implement `tailscale dns status` (#13353) 2 months ago
local_test.go ipn/ipnlocal: refactor and cleanup profileManager 2 months ago
loglines_test.go ipn/ipnlocal, all: plumb health trackers in tests 6 months ago
network-lock.go tka: truncate long rotation signature chains 2 months ago
network-lock_test.go tka: truncate long rotation signature chains 2 months ago
peerapi.go proxymap, various: distinguish between different protocols 5 months ago
peerapi_h2c.go
peerapi_macios_ext.go net/netmon, add: add netmon.State type alias of interfaces.State 6 months ago
peerapi_test.go ipn/ipnlocal, all: plumb health trackers in tests 6 months ago
profiles.go ipn/ipnlocal: refactor and cleanup profileManager 2 months ago
profiles_notwindows.go ipn/ipnlocal: refactor and cleanup profileManager 2 months ago
profiles_test.go ipn/ipnlocal: refactor and cleanup profileManager 2 months ago
profiles_windows.go ipn/ipnlocal: refactor and cleanup profileManager 2 months ago
serve.go ipn/ipnlocal: fix race condition that results in a panic sending on a closed channel 2 months ago
serve_test.go ipn/ipnlocal: fix race condition that results in a panic sending on a closed channel 2 months ago
ssh.go ipnlocal: log failure to get ssh host keys 9 months ago
ssh_stub.go ipnlocal: log failure to get ssh host keys 9 months ago
ssh_test.go ipn/ipnlocal: plumb health.Tracker into profileManager constructor 6 months ago
state_test.go ipn/ipnlocal: always send auth URL notifications when a user requests interactive login 2 months ago
taildrop.go ipn/localapi: add support for multipart POST to file-put 7 months ago
web_client.go all: remove LenIter, use Go 1.22 range-over-int instead 8 months ago
web_client_stub.go ipn/ipnlocal: add mutex to webClient struct 12 months ago