You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/control/controlclient
James Tucker c09c95ef67 types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation
Adds the ability to rotate discovery keys on running clients, needed for
testing upcoming disco key distribution changes.

Introduces key.DiscoKey, an atomic container for a disco private key,
public key, and the public key's ShortString, replacing the prior
separate atomic fields.

magicsock.Conn has a new RotateDiscoKey method, and access to this is
provided via localapi and a CLI debug command.

Note that this implementation is primarily for testing as it stands, and
regular use should likely introduce an additional mechanism that allows
the old key to be used for some time, to provide a seamless key rotation
rather than one that invalidates all sessions.

Updates tailscale/corp#34037

Signed-off-by: James Tucker <james@tailscale.com>
2 weeks ago
..
auto.go types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation 2 weeks ago
client.go types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation 2 weeks ago
controlclient_test.go control/controlclient,ipn/ipnlocal: replace State enum with boolean flags 3 weeks ago
direct.go types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation 2 weeks ago
direct_test.go types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation 2 weeks ago
errors.go control/controlclient, ipn: add client audit logging (#14950) 9 months ago
map.go types/netmap,*: remove some redundant fields from NetMap 2 weeks ago
map_test.go control/controlclient: optimize zstd decode of KeepAlive messages 2 months ago
sign.go all: update copyright and license headers 3 years ago
sign_supported.go util/syspolicy/policyclient: add policyclient.Client interface, start plumbing 3 months ago
sign_supported_test.go all: update copyright and license headers 3 years ago
sign_unsupported.go util/syspolicy/policyclient: add policyclient.Client interface, start plumbing 3 months ago
status.go control/controlclient,ipn/ipnlocal: replace State enum with boolean flags 3 weeks ago