summaryrefslogtreecommitdiffhomepage
path: root/control/controlhttp/controlhttpserver/controlhttpserver.go
diff options
context:
space:
mode:
authorJames Tucker <james@tailscale.com>2025-11-03 16:41:37 -0800
committerJames Tucker <jftucker@gmail.com>2025-11-18 12:16:15 -0800
commitc09c95ef67d5fe9ff127cf2102f189e47e41b119 (patch)
tree0fa5e59c1a028c189eb0fb0747b070c15886f316 /control/controlhttp/controlhttpserver/controlhttpserver.go
parentda508c504de626e1dcd9a218bed6cfb758298ba6 (diff)
downloadtailscale-c09c95ef67d5fe9ff127cf2102f189e47e41b119.tar.xz
tailscale-c09c95ef67d5fe9ff127cf2102f189e47e41b119.zip
types/key,wgengine/magicsock,control/controlclient,ipn: add debug disco key rotation
Adds the ability to rotate discovery keys on running clients, needed for testing upcoming disco key distribution changes. Introduces key.DiscoKey, an atomic container for a disco private key, public key, and the public key's ShortString, replacing the prior separate atomic fields. magicsock.Conn has a new RotateDiscoKey method, and access to this is provided via localapi and a CLI debug command. Note that this implementation is primarily for testing as it stands, and regular use should likely introduce an additional mechanism that allows the old key to be used for some time, to provide a seamless key rotation rather than one that invalidates all sessions. Updates tailscale/corp#34037 Signed-off-by: James Tucker <james@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver/controlhttpserver.go')
0 files changed, 0 insertions, 0 deletions