summaryrefslogtreecommitdiffhomepage
path: root/tempfork
AgeCommit message (Collapse)AuthorFilesLines
2021-03-01tempfork/wireguard-windows/firewall: add.David Anderson11-0/+2740
This is a fork of wireguard-windows's firewall package, with the firewall rules adjusted to better line up with tailscale's needs. The package was taken from commit 3cc76ed5f222ec82748ef3bd8c41d4b059e28cdb in our fork of wireguard-go. Signed-off-by: David Anderson <danderson@tailscale.com>
2020-12-14go.mod: upgrade staticcheck to 0.1.0Josh Bleecher Snyder1-1/+2
Also run go.mod and fix some staticcheck warnings. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>
2020-11-18tempfork/osexec: remove old fork of os/execBrad Fitzpatrick14-1482/+0
This package was a temporary fork of os/exec to fix an EINTR loop bug that was fixed upstream for Go 1.15 in https://github.com/golang/go/commit/8c1db77a92b1d17d3fe07999c5f20602a2080be9 (https://go-review.googlesource.com/c/go/+/232862), in src/os/exec_unix.go: https://github.com/golang/go/commit/8c1db77a92b1d17d3fe07999c5f20602a2080be9#diff-72072cbd53a7240debad8aa506ff7ec795f9cfac7322e779f9bac29a4d0d0bd4
2020-11-18tempfork/registry: deleteBrad Fitzpatrick8-1493/+0
It's unused.
2020-10-02all: use testing.T.TempDirJosh Bleecher Snyder1-6/+1
Bit of Friday cleanup. Signed-off-by: Josh Bleecher Snyder <josh@tailscale.com>
2020-07-21tempfork: add lite fork of net/http/pprof w/o html/template or reflectBrad Fitzpatrick3-0/+386
2020-06-05tempfork/registry: work around issue with Tailscale's redo build systemBrad Fitzpatrick1-0/+8
Updates tailscale/corp#293
2020-06-05tempfork/registry: add golang.org/x/sys/windows/registry + CL 236681Brad Fitzpatrick7-0/+1485
Temporary fork of golang.org/x/sys/windows/registry with: windows/registry: add Key.WaitChange wrapper around RegNotifyChangeKeyValue https://go-review.googlesource.com/c/sys/+/236681
2020-05-28tempfork/internal/testenv: removeBrad Fitzpatrick1-160/+0
It was for our x509 fork and no longer needed. (x509 changes went into our Go fork instead)
2020-04-27tempfork/x509: moved to tailscale/go's crypto/x509 insteadBrad Fitzpatrick35-18616/+0
2020-04-25tempfork/x509: remove the bundle tag in our forkBrad Fitzpatrick5-49/+0
We want to be able to omit from only one (not both)
2020-04-25tempfork/x509: store certs for iOS compressed in binary, parse lazilyBrad Fitzpatrick7-4406/+4530
2020-04-25tempfork/x509: fix build on darwin and windowsBrad Fitzpatrick3-7/+18
These fixes were originally in the updates to CL 229917 after Trybots failed there. See https://go-review.googlesource.com/c/go/+/229917/1..3
2020-04-24crypto/x509: keep smaller root cert representation in memory until neededBrad Fitzpatrick1-19/+38
(from patchset 1, c12c890c64dd6372b3893af1e6f5ab11802c9e81, of https://go-review.googlesource.com/c/go/+/230025/1, with merges fixes due to parent commit's differents from its ps1..ps3) Instead of parsing the PEM files and then storing the *Certificate values forever, still parse them to see if they're valid and pick out some fields, but then only store the decoded pem.Block.Bytes until that cert is first needed. Saves about 500K of memory on my (Debian stable) machine after doing a tls.Dial or calling x509.SystemCertPool. A more aggressive version of this is still possible: we can not keep the pem.Block.Bytes in memory either, and re-read them from disk when necessary. But dealing with files disappearing and even large multi-cert PEM files changing (with offsets sliding around) made this conservative version attractive. It doesn't change the slurp-roots-on-startup semantics. It just does so with less memory retained. Change-Id: I3aea333f4749ae3b0026042ec3ff7ac015c72204
2020-04-24crypto/x509: add support for CertPool to load certs lazilyBrad Fitzpatrick6-43/+136
(from patchset 1, 7cdc3c3e7427c9ef69e19224d6036c09c5ea1723, of https://go-review.googlesource.com/c/go/+/229917/1) This will allow building CertPools that consume less memory. (Most certs are never accessed. Different users/programs access different ones, but not many.) This CL only adds the new internal mechanism (and uses it for the old AddCert) but does not modify any existing root pool behavior. (That is, the default Unix roots are still all slurped into memory as of this CL) Change-Id: Ib3a42e4050627b5e34413c595d8ced839c7bfa14
2020-04-24Add fork of Go 1.15-dev's crypto/x509Numerous Gophers36-0/+18578
Snapshotted from Go commit 619c7a48a38b28b521591b490fd14ccb7ea5e821 (https://go-review.googlesource.com/c/go/+/229762, "crypto/x509: add x509omitbundledroots build tag to not embed roots") With 975c01342a25899962969833d8b2873dc8856a4f (https://go-review.googlesource.com/c/go/+/220721) removed, because it depends on other stuff in Go std that doesn't yet exist in a Go release. Also, add a subset fork of Go's internal/testenv, for use by x509's tests.
2020-02-09Move Linux client & common packages into a public repo.Earl Lee14-0/+1487