You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/wgengine
James Tucker c09c95ef67 types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation
Adds the ability to rotate discovery keys on running clients, needed for
testing upcoming disco key distribution changes.

Introduces key.DiscoKey, an atomic container for a disco private key,
public key, and the public key's ShortString, replacing the prior
separate atomic fields.

magicsock.Conn has a new RotateDiscoKey method, and access to this is
provided via localapi and a CLI debug command.

Note that this implementation is primarily for testing as it stands, and
regular use should likely introduce an additional mechanism that allows
the old key to be used for some time, to provide a seamless key rotation
rather than one that invalidates all sessions.

Updates tailscale/corp#34037

Signed-off-by: James Tucker <james@tailscale.com>
2 weeks ago
..
bench types/netmap: remove PrivateKey from NetworkMap 2 weeks ago
filter wgengine/filter: add check for unknown proto 10 months ago
magicsock types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation 2 weeks ago
netlog wgengine/netlog: strip dot suffix from node name (#17954) 2 weeks ago
netstack all: rename variables with lowercase-l/uppercase-I 2 weeks ago
router all: rename variables with lowercase-l/uppercase-I 2 weeks ago
wgcfg types/netmap: remove PrivateKey from NetworkMap 2 weeks ago
wgint wgengine{,/wgint}: add wgint.Peer wrapper type, add to wgengine.Engine 2 years ago
wglog all: use Go 1.22 range-over-int 2 years ago
winnet all: add test for package comments, fix, add comments as needed 1 year ago
mem_ios.go all: update copyright and license headers 3 years ago
pendopen.go wgengine: stop importing flowtrack when unused 2 months ago
pendopen_omit.go wgengine: stop importing flowtrack when unused 2 months ago
userspace.go ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc) 3 weeks ago
userspace_ext_test.go health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085) 3 months ago
userspace_test.go health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085) 3 months ago
watchdog.go ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc) 3 weeks ago
watchdog_omit.go ipn/ipnlocal, engine: avoid runtime/pprof with two usages of ts_omit_debug 2 months ago
watchdog_test.go health,ipn/ipnlocal: introduce eventbus in heath.Tracker (#17085) 3 months ago
wgengine.go ipn/ipnlocal: remove all the weird locking (LockedOnEntry, UnlockEarly, etc) 3 weeks ago