You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net
Andrew Dunham 0cc397e96d cmd/derper, net/netcheck: add challenge/response to generate_204 endpoint
The Lufthansa in-flight wifi generates a synthetic 204 response to the
DERP server's /generate_204 endpoint. This PR adds a basic
challenge/response to the endpoint; something sufficiently complicated
that it's unlikely to be implemented by a captive portal. We can then
check for the expected response to verify whether we're being MITM'd.

Follow-up to #5601

Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Change-Id: I94a68c9a16a7be7290200eea6a549b64f02ff48f
(cherry picked from commit 223126fe5b)
2 years ago
..
dns all: consistently initialize Logf when creating tsdial.Dialers 2 years ago
dnscache all: fix spelling mistakes 2 years ago
dnsfallback refactor: move from io/ioutil to io and os packages 2 years ago
flowtrack net/flowtrack: add json tags to Tuple (#5849) 2 years ago
interfaces net/interfaces: improve default route detection 2 years ago
netaddr all: migrate code from netaddr.FromStdAddr to Go 1.18 2 years ago
netcheck cmd/derper, net/netcheck: add challenge/response to generate_204 endpoint 2 years ago
neterror net/{neterror,dns/resolver}: move PacketWasTruncated to neterror from DNS code 2 years ago
netknob all: disable TCP keep-alives on iOS/Android 3 years ago
netns net/netns: implement UseSocketMark for Android. 2 years ago
netstat all: migrate more code code to net/netip directly 2 years ago
nettest ssh/tailssh: add TestSSHAuthFlow 2 years ago
netutil all: fix spelling mistakes 2 years ago
packet all: fix spelling mistakes 2 years ago
ping all: fix spelling mistakes 2 years ago
portmapper all: fix spelling mistakes 2 years ago
proxymux net/proxymux: add a listener mux that can run SOCKS and HTTP on a single socket. 3 years ago
routetable doctor: add package for running in-depth healthchecks; use in bugreport (#5413) 2 years ago
socks5 net/socks5: use new Go 1.19 binary.AppendByteOrder.AppendUintX 2 years ago
speedtest net/speedtest: retune to meet iperf on localhost in a VM 2 years ago
stun net/stun: unmap IPv4 addresses in 16 byte STUN replies 2 years ago
tlsdial envknob: support changing envknobs post-init 2 years ago
tsaddr all: migrate more code code to net/netip directly 2 years ago
tsdial all: fix spelling mistakes 2 years ago
tshttpproxy all: fix spelling mistakes 2 years ago
tstun net/tstun: rename statististics method (#5852) 2 years ago
tunstats net/tunstats: add Counts.Add (#5848) 2 years ago
wsconn net/wsconn: add back custom wrapper for turning a websocket.Conn into a net.Conn 2 years ago