You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/derp
Brad Fitzpatrick 7cf8ec8108 net/tlsdial: bake in LetsEncrypt's ISRG Root X1 root
We still try the host's x509 roots first, but if that fails (like if
the host is old), we fall back to using LetsEncrypt's root and
retrying with that.

tlsdial was used in the three main places: logs, control, DERP. But it
was missing in dnsfallback. So added it there too, so we can run fine
now on a machine with no DNS config and no root CAs configured.

Also, move SSLKEYLOGFILE support out of DERP. tlsdial is the logical place
for that support.

Fixes #1609

Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
3 years ago
..
derphttp net/tlsdial: bake in LetsEncrypt's ISRG Root X1 root 3 years ago
testdata derp: add debug traffic handler 3 years ago
derp.go derp: add new health update and server restarting frame types 3 years ago
derp_client.go derp: throttle client sends if server advertises rate limits 3 years ago
derp_server.go derp: throttle client sends if server advertises rate limits 3 years ago
derp_test.go derp: throttle client sends if server advertises rate limits 3 years ago
dropreason_string.go derp: accept dup clients without closing prior's connection 3 years ago