You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Andrew Dunham 2755f3843c health, net/tlsdial: add healthcheck for self-signed cert
When we make a connection to a server, we previously would verify with
the system roots, and then fall back to verifying with our baked-in
Let's Encrypt root if the system root cert verification failed.

We now explicitly check for, and log a health error on, self-signed
certificates. Additionally, we now always verify against our baked-in
Let's Encrypt root certificate and log an error if that isn't
successful. We don't consider this a health failure, since if we ever
change our server certificate issuer in the future older non-updated
versions of Tailscale will no longer be healthy despite being able to
connect.

Updates #3198

Change-Id: I00be5ceb8afee544ee795e3c7a2815476abc4abf
Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
1 year ago
..
connstats all: update copyright and license headers 1 year ago
dns all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork 1 year ago
dnscache all: update copyright and license headers 1 year ago
dnsfallback all: update copyright and license headers 1 year ago
flowtrack all: update copyright and license headers 1 year ago
interfaces all: update copyright and license headers 1 year ago
memnet net/memnet: rename from net/nettest 1 year ago
netaddr all: update copyright and license headers 1 year ago
netcheck all: update to Go 1.20, use strings.CutPrefix/Suffix instead of our fork 1 year ago
neterror all: update copyright and license headers 1 year ago
netknob all: update copyright and license headers 1 year ago
netns all: update copyright and license headers 1 year ago
netstat all: update copyright and license headers 1 year ago
netutil all: update copyright and license headers 1 year ago
packet all: update copyright and license headers 1 year ago
ping all: update copyright and license headers 1 year ago
portmapper all: update tools that manage copyright headers 1 year ago
proxymux all: update copyright and license headers 1 year ago
routetable all: update copyright and license headers 1 year ago
socks5 all: update copyright and license headers 1 year ago
speedtest all: update copyright and license headers 1 year ago
stun all: use Go 1.20's bytes.Clone 1 year ago
tlsdial health, net/tlsdial: add healthcheck for self-signed cert 1 year ago
tsaddr all: update copyright and license headers 1 year ago
tsdial all: update copyright and license headers 1 year ago
tshttpproxy all: update copyright and license headers 1 year ago
tstun all: update copyright and license headers 1 year ago
wsconn all: update copyright and license headers 1 year ago