You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Anton Tolchanov fd6686d81a tka: truncate long rotation signature chains
When a rotation signature chain reaches a certain size, remove the
oldest rotation signature from the chain before wrapping it in a new
rotation signature.

Since all previous rotation signatures are signed by the same wrapping
pubkey (node's own tailnet lock key), the node can re-construct the
chain, re-signing previous rotation signatures. This will satisfy the
existing certificate validation logic.

Updates #13185

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
2 months ago
..
conffile cmd/tailscaled, ipn/conffile: support ec2 user-data config file 5 months ago
ipnauth ipn/{ipnauth,ipnlocal,ipnserver,localapi}: start baby step toward moving access checks from the localapi.Handler to the LocalBackend 2 months ago
ipnlocal tka: truncate long rotation signature chains 2 months ago
ipnserver ipn/{ipnauth,ipnlocal,ipnserver,localapi}: start baby step toward moving access checks from the localapi.Handler to the LocalBackend 2 months ago
ipnstate cmd/tl-longchain: tool to re-sign nodes with long rotation signatures 2 months ago
localapi cli: implement `tailscale dns status` (#13353) 2 months ago
policy ipn,tailconfig: clean up unreleased and removed app connector service 12 months ago
store all: add test for package comments, fix, add comments as needed 4 months ago
backend.go health: begin work to use structured health warnings instead of strings, pipe changes into ipn.Notify (#12406) 4 months ago
conf.go ipn,wgengine/magicsock: allow setting static node endpoints via tailscaled configfile (#12882) 3 months ago
doc.go all: update copyright and license headers 2 years ago
ipn_clone.go cmd/cloner, cmd/viewer, util/codegen: add support for generic types and interfaces 3 months ago
ipn_test.go all: do not depend on the testing package 5 months ago
ipn_view.go ipn,wgengine: remove vestigial Prefs.AllowSingleHosts 5 months ago
prefs.go ipn: allow FQDN in exit node selection 3 months ago
prefs_test.go ipn: allow FQDN in exit node selection 3 months ago
serve.go cmd/serve: don't convert localhost to 127.0.0.1 4 months ago
serve_test.go cmd/serve: don't convert localhost to 127.0.0.1 4 months ago
store.go ipn: add comment about thread-safety to StateStore 8 months ago
store_test.go ipn: avoid useless no-op WriteState calls 1 year ago