You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn/ipnlocal
James Tucker c09c95ef67 types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation
Adds the ability to rotate discovery keys on running clients, needed for
testing upcoming disco key distribution changes.

Introduces key.DiscoKey, an atomic container for a disco private key,
public key, and the public key's ShortString, replacing the prior
separate atomic fields.

magicsock.Conn has a new RotateDiscoKey method, and access to this is
provided via localapi and a CLI debug command.

Note that this implementation is primarily for testing as it stands, and
regular use should likely introduce an additional mechanism that allows
the old key to be used for some time, to provide a seamless key rotation
rather than one that invalidates all sessions.

Updates tailscale/corp#34037

Signed-off-by: James Tucker <james@tailscale.com>
2 months ago
..
testdata ipn/ipnlocal: fix the path for writing cert files (#7203) 3 years ago
breaktcp_darwin.go cmd/tailscale: add debug commands to break connections 2 years ago
breaktcp_linux.go cmd/tailscale: add debug commands to break connections 2 years ago
bus.go ipn/local: add the suggested exit node to the ipn bus (#16748) 4 months ago
bus_test.go ipn/ipnlocal: add IPN Bus NotifyRateLimit watch bit NotifyRateLimit 1 year ago
c2n.go types/netmap: remove PrivateKey from NetworkMap 2 months ago
c2n_pprof.go ipn/ipnlocal, engine: avoid runtime/pprof with two usages of ts_omit_debug 3 months ago
c2n_test.go types/netmap,*: remove some redundant fields from NetMap 2 months ago
captiveportal.go feature/featuretags: add build tag to remove captive portal detection 4 months ago
cert.go syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging 2 months ago
cert_disabled.go feature/featuretags, all: add ts_omit_acme to disable TLS cert support 4 months ago
cert_test.go ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250) 10 months ago
dnsconfig_test.go types/netmap,*: remove some redundant fields from NetMap 2 months ago
drive.go feature/drive: start factoring out Taildrive, add ts_omit_drive build tag 4 months ago
drive_tomove.go feature/drive: start factoring out Taildrive, add ts_omit_drive build tag 4 months ago
expiry.go ipn/ipnlocal: use eventbus.SubscribeFunc in expiryManager 3 months ago
expiry_test.go control/controlclient: introduce eventbus messages instead of callbacks (#16956) 4 months ago
extension_host.go ipn/ipnlocal: make GetExt work earlier, before extension init 8 months ago
extension_host_test.go health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085) 4 months ago
hwattest.go Revert "control/controlclient: back out HW key attestation (#17664)" (#17732) 2 months ago
local.go types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation 2 months ago
local_test.go types/netmap,*: remove some redundant fields from NetMap 2 months ago
loglines_test.go health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085) 4 months ago
netstack.go ipn/ipnlocal: move last unconditional gvisor import, complete ts_omit_netstack support 3 months ago
network-lock.go ipn/ipnlocal: use an in-memory TKA store if FS is unavailable 2 months ago
network-lock_test.go control/controlclient: remove some public API, move to Options & test-only 2 months ago
node_backend.go types/netmap,*: remove some redundant fields from NetMap 2 months ago
node_backend_test.go ipn/ipnlocal: introduce the concept of client-side-reachability (#17367) 3 months ago
peerapi.go feature/featuretags: add features for c2n, peerapi, advertise/use routes/exit nodes 3 months ago
peerapi_drive.go feature/drive: start factoring out Taildrive, add ts_omit_drive build tag 4 months ago
peerapi_macios_ext.go net/netmon, add: add netmon.State type alias of interfaces.State 2 years ago
peerapi_test.go ipn/ipnlocal: fix another racy test (#17472) 3 months ago
prefs_metrics.go feature/featuretags: add features for c2n, peerapi, advertise/use routes/exit nodes 3 months ago
profiles.go types/netmap: remove PrivateKey from NetworkMap 2 months ago
profiles_notwindows.go ipn/ipnlocal: refactor and cleanup profileManager 1 year ago
profiles_test.go ipn{,/local},cmd/tailscale: add "sync" flag and pref to disable control map poll 2 months ago
profiles_windows.go ipn/ipnlocal: refactor and cleanup profileManager 1 year ago
serve.go ipn/ipnlocal: add PROXY protocol support to Funnel/Serve 2 months ago
serve_disabled.go all: add ts_omit_serve, start making tailscale serve/funnel be modular 4 months ago
serve_test.go ipn: add support for HTTP Redirects (#17594) 2 months ago
ssh.go ipn/ipnlocal: fix a case where ts_omit_ssh was still linking in x/crypto/ssh 4 months ago
ssh_stub.go ipn/ipnlocal: fix a case where ts_omit_ssh was still linking in x/crypto/ssh 4 months ago
ssh_test.go health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085) 4 months ago
state_test.go types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation 2 months ago
tailnetlock_disabled.go all: add ts_omit_tailnetlock as a start of making it build-time modular 4 months ago
web_client.go util/backoff: rename logtail/backoff package to util/backoff 3 months ago
web_client_stub.go derp/derpserver: split off derp.Server out of derp into its own package 4 months ago