You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/control/controlclient
Adrian Dewhurst 04dd6d1dae
control/controlclient: sign RegisterRequest (#1549)
control/controlclient: sign RegisterRequest

Some customers wish to verify eligibility for devices to join their
tailnets using machine identity certificates. TLS client certs could
potentially fulfill this role but the initial customer for this feature
has technical requirements that prevent their use. Instead, the
certificate is loaded from the Windows local machine certificate store
and uses its RSA public key to sign the RegisterRequest message.

There is room to improve the flexibility of this feature in future and
it is currently only tested on Windows (although Darwin theoretically
works too), but this offers a reasonable starting place for now.

Updates tailscale/coral#6

Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>
4 years ago
..
auto.go control, ipn, tailcfg: remove golang.org/x/oauth2 dep, add tailcfg.Oauth2Token 4 years ago
controlclient_test.go cover one more case in TestStatusEqual. 4 years ago
debug.go tailcfg, control/controlclient: add goroutine dump debug feature 4 years ago
debug_test.go tailcfg, control/controlclient: add goroutine dump debug feature 4 years ago
direct.go control/controlclient: sign RegisterRequest (#1549) 4 years ago
direct_test.go types/netmap: split controlclient.NetworkMap off into its own leaf package 4 years ago
filter.go wgengine/filter: remove the Matches type. 4 years ago
hostinfo_linux.go control/controlclient, version/distro: detect NixOS explicitly 4 years ago
hostinfo_windows.go control/controlclient: cache Windows version 4 years ago
sign.go control/controlclient: sign RegisterRequest (#1549) 4 years ago
sign_supported.go control/controlclient: sign RegisterRequest (#1549) 4 years ago
sign_unsupported.go control/controlclient: sign RegisterRequest (#1549) 4 years ago