You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Brad Fitzpatrick 8009ad74a3 cmd/derper, net/tlsdial: fix client's self-signed cert validation
This fixes the implementation and test from #15208 which apparently
never worked.

Ignore the metacert when counting the number of expected certs
presented.

And fix the test, pulling out the TLSConfig setup code into something
shared between the real cmd/derper and the test.

Fixes #15579

Change-Id: I90526e38e59f89b480629b415f00587b107de10a
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
7 months ago
..
art all: fix new lint warnings from bumping staticcheck 1 year ago
bakedroots net/bakedroots: add LetsEncrypt ISRG Root X2 11 months ago
captivedetection tailcfg: add DERPRegion.NoMeasureNoHome, deprecate+document Avoid [cap 115] 9 months ago
connstats {net/connstats,wgengine/magicsock}: fix packet counting in connstats 1 year ago
dns net/dns,docs/windows/policy,util/syspolicy: register Tailscale IP addresses in AD DNS if required by policy 7 months ago
dnscache net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 8 months ago
dnsfallback net/netmon: publish events to event bus 8 months ago
flowtrack net/flowtrack: fix, test String method 1 year ago
ipset all: use iterators over slice views more 1 year ago
ktimeout various: disable MPTCP when setting TCP_USER_TIMEOUT sockopt (#15063) 10 months ago
memnet net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 8 months ago
netaddr all: update copyright and license headers 3 years ago
netcheck all: use network less when running in v86 emulator 8 months ago
neterror net/neterror, wgengine/magicsock: use UDP GSO and GRO on Linux (#7791) 3 years ago
netkernelconf all: remove non-applicable "linux" deps on Android 7 months ago
netknob all: update copyright and license headers 3 years ago
netmon net/netmon: publish events to event bus 8 months ago
netns all: remove non-applicable "linux" deps on Android 7 months ago
netstat all: add test for package comments, fix, add comments as needed 1 year ago
netutil net/netmon: publish events to event bus 8 months ago
netx net/{netx,memnet},all: add netx.DialFunc, move memnet Network impl 8 months ago
packet net/packet: implement Geneve header serialization (#15301) 9 months ago
ping net/ping: fix ICMP echo code field to 0 2 years ago
portmapper net/portmapper: fix test flakes from logging after test done 7 months ago
proxymux all: cleanup unused code, part 1 (#10661) 2 years ago
routetable net/routetable: don't try to fetch the route table on android 8 months ago
socks5 net/socks5: optimize UDP relay 1 year ago
sockstats net/sockstats: prevent crash in setNetMon (#13985) 1 year ago
speedtest all: update copyright and license headers 3 years ago
stun ci: enable checklocks workflow for specific packages 1 year ago
stunserver all: use Go 1.22 range-over-int 2 years ago
tcpinfo all: use Go 1.22 range-over-int 2 years ago
tlsdial cmd/derper, net/tlsdial: fix client's self-signed cert validation 7 months ago
tsaddr net/tsaddr: include test input in test failure output 1 year ago
tsdial net/tsdial: update (*Dialer).SetRoutes() to log the size of the resulting bart.Table 7 months ago
tshttpproxy all: fix golangci-lint errors 11 months ago
tstun net/tstun: don't try to set link attributes on android 8 months ago
udprelay net/udprelay{/endpoint}: move ServerEndpoint tests (#15949) 7 months ago
wsconn go.{mod,sum}: migrate from nhooyr.io/websocket to github.com/coder/websocket 1 year ago