You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Go to file

Andrew Dunham 2755f3843c health, net/tlsdial: add healthcheck for self-signed cert When we make a connection to a server, we previously would verify with the system roots, and then fall back to verifying with our baked-in Let's Encrypt root if the system root cert verification failed. We now explicitly check for, and log a health error on, self-signed certificates. Additionally, we now always verify against our baked-in Let's Encrypt root certificate and log an error if that isn't successful. We don't consider this a health failure, since if we ever change our server certificate issuer in the future older non-updated versions of Tailscale will no longer be healthy despite being able to connect. Updates #3198 Change-Id: I00be5ceb8afee544ee795e3c7a2815476abc4abf Signed-off-by: Andrew Dunham <andrew@du.nham.ca>		2 years ago
.bencher	…
.github	.github/workflows: delete CIFuzz job	2 years ago
atomicfile	…
chirp	…
client/tailscale	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
cmd	health, net/tlsdial: add healthcheck for self-signed cert	2 years ago
control	net/memnet: rename from net/nettest	2 years ago
derp	all: use Go 1.20's bytes.Clone	2 years ago
disco	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
docs	…
doctor	…
envknob	…
health	health, net/tlsdial: add healthcheck for self-signed cert	2 years ago
hostinfo	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
internal/tooldeps	…
ipn	all: use Go 1.20's bytes.Clone	2 years ago
jsondb	…
kube	…
licenses	licenses: update win/apple licenses	2 years ago
log	…
logpolicy	…
logtail	…
metrics	…
net	health, net/tlsdial: add healthcheck for self-signed cert	2 years ago
packages/deb	…
paths	…
portlist	…
prober	cmd/derpprobe: migrate to the prober framework	2 years ago
safesocket	safesocket: remove the now unused WindowsLocalPort	2 years ago
scripts	all: update tools that manage copyright headers	2 years ago
smallzstd	…
ssh/tailssh	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
syncs	…
tailcfg	…
tempfork	…
tka	…
tool	go.toolchain.rev: update to Go 1.20rc3	2 years ago
tsconst	…
tsnet	ipn/ipnlocal: drop not required StateKey parameter	2 years ago
tstest	all: use Go 1.20's bytes.Clone	2 years ago
tstime	…
tsweb	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
types	all: use Go 1.20's bytes.Clone	2 years ago
util	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
version	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
wf	…
wgengine	wgengine/magicsock: add envknob to print information about port selection	2 years ago
words	…
.gitattributes	…
.gitignore	…
ALPINE.txt	…
AUTHORS	…
CODE_OF_CONDUCT.md	…
Dockerfile	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
Dockerfile.base	…
LICENSE	all: update tools that manage copyright headers	2 years ago
Makefile	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
PATENTS	…
README.md	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
SECURITY.md	…
VERSION.txt	…
api.md	…
build_dist.sh	…
build_docker.sh	build_docker.sh: use docker hub for base image hosting.	2 years ago
flake.lock	nix: update nixpkgs flake, override go_1_20 for tailscale_go (#7139 )	2 years ago
flake.nix	nix: update nixpkgs flake, override go_1_20 for tailscale_go (#7139 )	2 years ago
go.mod	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
go.mod.sri	flake.nix: update SRI hash for Go modules.	2 years ago
go.sum	all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork	2 years ago
go.toolchain.branch	go.toolchain.branch: update to Go 1.20	2 years ago
go.toolchain.rev	go.toolchain.rev: update to Go 1.20rc3	2 years ago
go.toolchain.sri	flake.nix: update SRI hash.	2 years ago
pull-toolchain.sh	…
shell.nix	flake.nix: update SRI hash.	2 years ago
staticcheck.conf	…
update-flake.sh	…
version-embed.go	…
version_test.go	…

README.md

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains the majority of Tailscale's open source code. Notably, it includes the tailscaled daemon and the tailscale CLI tool. The tailscaled daemon runs on Linux, Windows, macOS, and to varying degrees on FreeBSD and OpenBSD. The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.

Other Tailscale repos of note:

the Android app is at https://github.com/tailscale/tailscale-android
the Synology package is at https://github.com/tailscale/tailscale-synology
the QNAP package is at https://github.com/tailscale/tailscale-qpkg
the Chocolatey packaging is at https://github.com/tailscale/tailscale-chocolatey

For background on which parts of Tailscale are open source and why, see https://tailscale.com/opensource/.

Using

We serve packages for a variety of distros and platforms at https://pkgs.tailscale.com.

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers. The GUI wrappers on non-open source platforms are themselves not open source.

Building

We always require the latest Go release, currently Go 1.20. (While we build releases with our Go fork, its use is not required.)

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

See git log for our commit message style. It's basically the same as Go's style.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

Legal

WireGuard is a registered trademark of Jason A. Donenfeld.