You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
James Tucker c09c95ef67 types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation
Adds the ability to rotate discovery keys on running clients, needed for
testing upcoming disco key distribution changes.

Introduces key.DiscoKey, an atomic container for a disco private key,
public key, and the public key's ShortString, replacing the prior
separate atomic fields.

magicsock.Conn has a new RotateDiscoKey method, and access to this is
provided via localapi and a CLI debug command.

Note that this implementation is primarily for testing as it stands, and
regular use should likely introduce an additional mechanism that allows
the old key to be used for some time, to provide a seamless key rotation
rather than one that invalidates all sessions.

Updates tailscale/corp#34037

Signed-off-by: James Tucker <james@tailscale.com>
2 weeks ago
..
addlicense all: fix golangci-lint errors 11 months ago
build-webclient client/web: precompress assets 2 years ago
checkmetrics cmd/checkmetrics: add command for checking metrics against kb 1 year ago
cloner cmd/cloner: support cloning arbitrarily-nested maps 3 weeks ago
connector-gen cmd/connector-gen: add helper tool for wide app connector configurations 2 years ago
containerboot all: rename variables with lowercase-l/uppercase-I 2 weeks ago
derper all: rename variables with lowercase-l/uppercase-I 2 weeks ago
derpprobe cmd/derpprobe,prober: add run all probes handler (#16875) 4 months ago
dist {cmd/dist,release/dist}: add support for intermediary QNAP signing certificates 4 months ago
featuretags feature/featuretags,cmd/omitsize: support feature dependencies 3 months ago
get-authkey cmd,tsnet,internal/client: create internal shim to deprecated control plane API 10 months ago
gitops-pusher scripts/check_license_headers.sh: delete, rewrite as a Go test 6 months ago
hello cmd/hello: display native ipv4 (#15191) 9 months ago
jsonimports cmd/jsonimports: add static analyzer for consistent "json" imports (#17669) 1 month ago
k8s-nameserver k8s-operator: add IPv6 support for DNS records (#16691) 2 months ago
k8s-operator all: rename variables with lowercase-l/uppercase-I 2 weeks ago
k8s-proxy all: rename variables with lowercase-l/uppercase-I 2 weeks ago
mkmanifest cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS 3 years ago
mkpkg go.mod: upgrade nfpm to v2 (#8786) 2 years ago
mkversion version/mkversion: open-source version generation logic 3 years ago
nardump cmd/nardump: support symlinks, add basic test 8 months ago
natc all: rename variables with lowercase-l/uppercase-I 2 weeks ago
netlogfmt all: use Go 1.22 range-over-int 2 years ago
nginx-auth tailcfg,all: add and use Node.IsTagged() 3 years ago
omitsize feature/featuretags,cmd/omitsize: support feature dependencies 3 months ago
pgproxy all: use new LocalAPI client package location 10 months ago
printdep cmd/printdep: print correct toolchain URL 3 years ago
proxy-test-server net/tlsdial: fix TLS cert validation of HTTPS proxies 6 months ago
proxy-to-grafana scripts/check_license_headers.sh: delete, rewrite as a Go test 6 months ago
sniproxy all: rename variables with lowercase-l/uppercase-I 2 weeks ago
speedtest all: update copyright and license headers 3 years ago
ssh-auth-none-demo ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh 10 months ago
stunc cmd/stunc: enforce read timeout deadline (#14309) 1 year ago
stund types/netmap: remove PrivateKey from NetworkMap 2 weeks ago
stunstamp all: rename variables with lowercase-l/uppercase-I 2 weeks ago
sync-containers all: rename variables with lowercase-l/uppercase-I 2 weeks ago
systray client/systray: allow specifying tailscaled socket 4 months ago
tailscale types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation 2 weeks ago
tailscaled go.mod: bump golang.org/x/crypto (#17907) 2 weeks ago
testcontrol all: use Go 1.22 range-over-int 2 years ago
testwrapper cmd/testwrapper/flakytest: use t.Attr annotation on flaky tests 2 months ago
tl-longchain all: rename variables with lowercase-l/uppercase-I 2 weeks ago
tsconnect types/netmap,*: remove some redundant fields from NetMap 2 weeks ago
tsidp go.mod: bump golang.org/x/crypto (#17907) 2 weeks ago
tsshd all: update copyright and license headers 3 years ago
tta all: use new LocalAPI client package location 10 months ago
vet cmd/vet/jsontags: fix a typo in an error message 2 weeks ago
viewer cmd/{cloner,viewer}: handle maps of views 3 weeks ago
vnet cmd/vnet: add wsproxy mode 8 months ago
xdpderper tsweb: split promvarz into an optional dependency 9 months ago