You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn/ipnlocal
Patrick O'Doherty e45557afc0
types/persist: add AttestationKey (#17281)
Extend Persist with AttestationKey to record a hardware-backed
attestation key for the node's identity.

Add a flag to tailscaled to allow users to control the use of
hardware-backed keys to bind node identity to individual machines.

Updates tailscale/corp#31269


Change-Id: Idcf40d730a448d85f07f1bebf387f086d4c58be3

Signed-off-by: Patrick O'Doherty <patrick@tailscale.com>
2 months ago
..
testdata ipn/ipnlocal: fix the path for writing cert files (#7203) 3 years ago
breaktcp_darwin.go cmd/tailscale: add debug commands to break connections 2 years ago
breaktcp_linux.go cmd/tailscale: add debug commands to break connections 2 years ago
bus.go ipn/local: add the suggested exit node to the ipn bus (#16748) 3 months ago
bus_test.go ipn/ipnlocal: add IPN Bus NotifyRateLimit watch bit NotifyRateLimit 1 year ago
c2n.go control/controlclient,health,ipn/ipnlocal,health: fix deadlock by deleting health reporting 2 months ago
c2n_pprof.go ipn/ipnlocal, engine: avoid runtime/pprof with two usages of ts_omit_debug 2 months ago
c2n_test.go ipn/ipnlocal: make the redactNetmapPrivateKeys test recursive 3 months ago
captiveportal.go feature/featuretags: add build tag to remove captive portal detection 2 months ago
cert.go feature, net/tshttpproxy: pull out support for using proxies as a feature 2 months ago
cert_disabled.go feature/featuretags, all: add ts_omit_acme to disable TLS cert support 3 months ago
cert_test.go ipn/ipnlocal, envknob: make it possible to configure the cert client to act in read-only mode (#15250) 9 months ago
dnsconfig_test.go ipn,net,tsnet,wgengine: make an eventbus mandatory where it is used (#16594) 4 months ago
drive.go feature/drive: start factoring out Taildrive, add ts_omit_drive build tag 3 months ago
drive_tomove.go feature/drive: start factoring out Taildrive, add ts_omit_drive build tag 3 months ago
expiry.go ipn/ipnlocal: use eventbus.SubscribeFunc in expiryManager 2 months ago
expiry_test.go control/controlclient: introduce eventbus messages instead of callbacks (#16956) 3 months ago
extension_host.go ipn/ipnlocal: make GetExt work earlier, before extension init 7 months ago
extension_host_test.go health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085) 3 months ago
hwattest.go types/persist: add AttestationKey (#17281) 2 months ago
local.go types/persist: add AttestationKey (#17281) 2 months ago
local_test.go types/persist: add AttestationKey (#17281) 2 months ago
loglines_test.go health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085) 3 months ago
netstack.go ipn/ipnlocal: move last unconditional gvisor import, complete ts_omit_netstack support 2 months ago
network-lock.go all: add ts_omit_tailnetlock as a start of making it build-time modular 3 months ago
network-lock_test.go net/netmon: remove usage of direct callbacks from netmon (#17292) 2 months ago
node_backend.go ipn/ipnlocal: introduce the concept of client-side-reachability (#17367) 2 months ago
node_backend_test.go ipn/ipnlocal: introduce the concept of client-side-reachability (#17367) 2 months ago
peerapi.go feature/featuretags: add features for c2n, peerapi, advertise/use routes/exit nodes 2 months ago
peerapi_drive.go feature/drive: start factoring out Taildrive, add ts_omit_drive build tag 3 months ago
peerapi_macios_ext.go net/netmon, add: add netmon.State type alias of interfaces.State 2 years ago
peerapi_test.go ipn/ipnlocal: fix another racy test (#17472) 2 months ago
prefs_metrics.go feature/featuretags: add features for c2n, peerapi, advertise/use routes/exit nodes 2 months ago
profiles.go types/persist: add AttestationKey (#17281) 2 months ago
profiles_notwindows.go ipn/ipnlocal: refactor and cleanup profileManager 1 year ago
profiles_test.go types/persist: add AttestationKey (#17281) 2 months ago
profiles_windows.go ipn/ipnlocal: refactor and cleanup profileManager 1 year ago
serve.go ipn/ipnlocal: proxy h2c grpc using net/http.Transport instead of x/net/http2 2 months ago
serve_disabled.go all: add ts_omit_serve, start making tailscale serve/funnel be modular 3 months ago
serve_test.go ipn/ipnlocal: proxy h2c grpc using net/http.Transport instead of x/net/http2 2 months ago
ssh.go ipn/ipnlocal: fix a case where ts_omit_ssh was still linking in x/crypto/ssh 3 months ago
ssh_stub.go ipn/ipnlocal: fix a case where ts_omit_ssh was still linking in x/crypto/ssh 3 months ago
ssh_test.go health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085) 3 months ago
state_test.go ipn/ipnlocal: use named arguments for `mockControl.send()` 2 months ago
tailnetlock_disabled.go all: add ts_omit_tailnetlock as a start of making it build-time modular 3 months ago
web_client.go util/backoff: rename logtail/backoff package to util/backoff 2 months ago
web_client_stub.go derp/derpserver: split off derp.Server out of derp into its own package 2 months ago