You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd/derper
Andrew Dunham 0cc397e96d cmd/derper, net/netcheck: add challenge/response to generate_204 endpoint
The Lufthansa in-flight wifi generates a synthetic 204 response to the
DERP server's /generate_204 endpoint. This PR adds a basic
challenge/response to the endpoint; something sufficiently complicated
that it's unlikely to be implemented by a captive portal. We can then
check for the expected response to verify whether we're being MITM'd.

Follow-up to #5601

Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Change-Id: I94a68c9a16a7be7290200eea6a549b64f02ff48f
(cherry picked from commit 223126fe5b)
2 years ago
..
bootstrap_dns.go cmd/derper: add support for unpublished bootstrap DNS entries (#5529) 2 years ago
bootstrap_dns_test.go cmd/derper: add support for unpublished bootstrap DNS entries (#5529) 2 years ago
cert.go cmd/derper: fix data race & server panic in manual cert mode 2 years ago
depaware.txt net/wsconn: add back custom wrapper for turning a websocket.Conn into a net.Conn 2 years ago
derper.go cmd/derper, net/netcheck: add challenge/response to generate_204 endpoint 2 years ago
derper_test.go cmd/derper, net/netcheck: add challenge/response to generate_204 endpoint 2 years ago
mesh.go derp: use new node key type. 3 years ago
websocket.go net/wsconn: add back custom wrapper for turning a websocket.Conn into a net.Conn 2 years ago