You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Brad Fitzpatrick 7fac0175c0 cmd/derper, derp/derphttp: support, generate self-signed IP address certs ... For people who can't use LetsEncrypt because it's banned. Per https://github.com/tailscale/tailscale/issues/11776#issuecomment-2520955317 This does two things: 1) if you run derper with --certmode=manual and --hostname=$IP_ADDRESS we previously permitted, but now we also: * auto-generate the self-signed cert for you if it doesn't yet exist on disk * print out the derpmap configuration you need to use that self-signed cert 2) teaches derp/derphttp's derp dialer to verify the signature of self-signed TLS certs, if so declared in the existing DERPNode.CertName field, which previously existed for domain fronting, separating out the dial hostname from how certs are validates, so it's not overloaded much; that's what it was meant for. Fixes #11776 Change-Id: Ie72d12f209416bb7e8325fe0838cd2c66342c5cf Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>		9 months ago
..
addlicense	all: fix golangci-lint errors	11 months ago
build-webclient	client/web: precompress assets	2 years ago
checkmetrics	cmd/checkmetrics: add command for checking metrics against kb	1 year ago
cloner	cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types	1 year ago
connector-gen	cmd/connector-gen: add helper tool for wide app connector configurations	2 years ago
containerboot	cmd/containerboot: fix nil pointer exception (#15090)	9 months ago
derper	cmd/derper, derp/derphttp: support, generate self-signed IP address certs	9 months ago
derpprobe	prober: support filtering regions by region ID in addition to code	11 months ago
dist	release/dist/qnap: add qnap target builder	2 years ago
get-authkey	cmd,tsnet,internal/client: create internal shim to deprecated control plane API	10 months ago
gitops-pusher	cmd/gitops-pusher: log error details when unable to fetch ACL ETag	10 months ago
hello	cmd/hello: display native ipv4 (#15191)	9 months ago
k8s-nameserver	cmd/k8s-nameserver: fix AAAA record query response (#12412)	2 years ago
k8s-operator	cmd/k8s-operator: ensure HA Ingress can operate in multicluster mode. (#15157)	9 months ago
mkmanifest	cmd/mkmanifest, cmd/tailscale, cmd/tailscaled: remove Windows arm32 resources from OSS	3 years ago
mkpkg	go.mod: upgrade nfpm to v2 (#8786)	2 years ago
mkversion	version/mkversion: open-source version generation logic	3 years ago
nardump	all: update copyright and license headers	3 years ago
natc	cmd/natc: remove speculative tuning from natc	10 months ago
netlogfmt	all: use Go 1.22 range-over-int	2 years ago
nginx-auth	tailcfg,all: add and use Node.IsTagged()	3 years ago
pgproxy	all: use new LocalAPI client package location	10 months ago
printdep	cmd/printdep: print correct toolchain URL	3 years ago
proxy-to-grafana	all: use new LocalAPI client package location	10 months ago
sniproxy	all: use new LocalAPI client package location	10 months ago
speedtest	all: update copyright and license headers	3 years ago
ssh-auth-none-demo	ssh,tempfork/gliderlabs/ssh: replace github.com/tailscale/golang-x-crypto/ssh with golang.org/x/crypto/ssh	10 months ago
stunc	cmd/stunc: enforce read timeout deadline (#14309)	1 year ago
stund	go.toolchain.branch: update to Go 1.24 (#15016)	10 months ago
stunstamp	cmd/stunstamp: add protocol context to timeout logs (#13422)	1 year ago
sync-containers	all: adjust some build tags for plan9	2 years ago
systray	cmd/systray: add cmd/systray back as a small client/systray wrapper	11 months ago
tailscale	go.toolchain.branch: update to Go 1.24 (#15016)	10 months ago
tailscaled	go.toolchain.branch: update to Go 1.24 (#15016)	10 months ago
testcontrol	all: use Go 1.22 range-over-int	2 years ago
testwrapper	cmd/testwrapper: Display package-level output	9 months ago
tl-longchain	all: use new LocalAPI client package location	10 months ago
tsconnect	go.toolchain.branch: update to Go 1.24 (#15016)	10 months ago
tsidp	cmd/tsidp: use constant time comparison for client_id/secret (#15222)	9 months ago
tsshd	all: update copyright and license headers	3 years ago
tta	all: use new LocalAPI client package location	10 months ago
viewer	cmd/viewer,all: consistently use "read-only" instead of "readonly"	11 months ago
vnet	tstest/natlab/vnet: add start of IPv6 support	1 year ago
xdpderper	all: add test for package comments, fix, add comments as needed	1 year ago