You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/control/controlclient
Brad Fitzpatrick e92eb6b17b net/tlsdial: fix TLS cert validation of HTTPS proxies
If you had HTTPS_PROXY=https://some-valid-cert.example.com running a
CONNECT proxy, we should've been able to do a TLS CONNECT request to
e.g. controlplane.tailscale.com:443 through that, and I'm pretty sure
it used to work, but refactorings and lack of integration tests made
it regress.

It probably regressed when we added the baked-in LetsEncrypt root cert
validation fallback code, which was testing against the wrong hostname
(the ultimate one, not the one which we were being asked to validate)

Fixes #16222

Change-Id: If014e395f830e2f87f056f588edacad5c15e91bc
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
6 months ago
..
auto.go control/controlclient,health,tailcfg: refactor control health messages (#15839) 7 months ago
client.go control/controlclient: delete unused Client.Login Oauth2Token field 2 years ago
controlclient_test.go net/tlsdial: fix TLS cert validation of HTTPS proxies 6 months ago
direct.go net/tlsdial: fix TLS cert validation of HTTPS proxies 6 months ago
direct_test.go tka: test SigCredential signatures and netmap filtering 1 year ago
errors.go control/controlclient, ipn: add client audit logging (#14950) 9 months ago
map.go health: prefix Warnables received from the control plane 6 months ago
map_test.go health: prefix Warnables received from the control plane 6 months ago
noise.go controlclient: do not set HTTPS port for any private coordination server IP (#14564) 11 months ago
noise_test.go nettest, *: add option to run HTTP tests with in-memory network 8 months ago
sign.go all: update copyright and license headers 3 years ago
sign_supported.go control/controlclient: use the most recent syspolicy.MachineCertificateSubject value 1 year ago
sign_supported_test.go all: update copyright and license headers 3 years ago
sign_unsupported.go control/controlclient: support certstore without cgo 2 years ago
status.go all: implement AppendText alongside MarshalText (#9207) 2 years ago