You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Anton Tolchanov fd6686d81a tka: truncate long rotation signature chains
When a rotation signature chain reaches a certain size, remove the
oldest rotation signature from the chain before wrapping it in a new
rotation signature.

Since all previous rotation signatures are signed by the same wrapping
pubkey (node's own tailnet lock key), the node can re-construct the
chain, re-signing previous rotation signatures. This will satisfy the
existing certificate validation logic.

Updates #13185

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
1 year ago
..
conffile cmd/tailscaled, ipn/conffile: support ec2 user-data config file 2 years ago
ipnauth ipn/{ipnauth,ipnlocal,ipnserver,localapi}: start baby step toward moving access checks from the localapi.Handler to the LocalBackend 1 year ago
ipnlocal tka: truncate long rotation signature chains 1 year ago
ipnserver ipn/{ipnauth,ipnlocal,ipnserver,localapi}: start baby step toward moving access checks from the localapi.Handler to the LocalBackend 1 year ago
ipnstate cmd/tl-longchain: tool to re-sign nodes with long rotation signatures 1 year ago
localapi cli: implement `tailscale dns status` (#13353) 1 year ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 2 years ago
store all: add test for package comments, fix, add comments as needed 1 year ago
backend.go health: begin work to use structured health warnings instead of strings, pipe changes into ipn.Notify (#12406) 2 years ago
conf.go ipn,wgengine/magicsock: allow setting static node endpoints via tailscaled configfile (#12882) 1 year ago
doc.go all: update copyright and license headers 3 years ago
ipn_clone.go cmd/cloner, cmd/viewer, util/codegen: add support for generic types and interfaces 1 year ago
ipn_test.go all: do not depend on the testing package 2 years ago
ipn_view.go ipn,wgengine: remove vestigial Prefs.AllowSingleHosts 2 years ago
prefs.go ipn: allow FQDN in exit node selection 1 year ago
prefs_test.go ipn: allow FQDN in exit node selection 1 year ago
serve.go cmd/serve: don't convert localhost to 127.0.0.1 1 year ago
serve_test.go cmd/serve: don't convert localhost to 127.0.0.1 1 year ago
store.go ipn: add comment about thread-safety to StateStore 2 years ago
store_test.go ipn: avoid useless no-op WriteState calls 2 years ago