summaryrefslogtreecommitdiffhomepage
path: root/tka
AgeCommit message (Expand)AuthorFilesLines
2024-09-04tka: truncate long rotation signature chainsAnton Tolchanov2-1/+185
2024-08-21cmd/tl-longchain: tool to re-sign nodes with long rotation signaturesAnton Tolchanov2-0/+34
2024-06-27ipn/ipnlocal: allow multiple signature chains from the same SigCredentialAnton Tolchanov2-8/+27
2024-06-27tka: test SigCredential signatures and netmap filteringAnton Tolchanov2-0/+102
2024-06-03ipn/ipnlocal: discard node keys that have been rotated outAnton Tolchanov3-5/+232
2024-05-31cmd/tailscale/cli: print node signature in `tailscale lock status`Anton Tolchanov1-0/+36
2024-04-16all: use Go 1.22 range-over-intBrad Fitzpatrick5-5/+5
2024-02-08all: use new AppendEncode methods available in Go 1.22 (#11079)Joe Tsai1-10/+1
2023-12-20all: cleanup unused code, part 1 (#10661)Andrew Lytvynov1-18/+0
2023-11-27tka: clarify field commentJenny Zhang1-1/+4
2023-09-09all: use set.Set consistently instead of map[T]struct{}Brad Fitzpatrick2-6/+8
2023-09-01all: implement AppendText alongside MarshalText (#9207)Joe Tsai1-3/+15
2023-08-01all: implement lock revoke-keys commandTom DNetto2-3/+246
2023-07-19tka: guard against key-length panics when verifying signaturesTom DNetto2-0/+9
2023-07-19tka: allow checkpoint AUMs to change TKA stateTom DNetto1-14/+1
2023-06-20tka: add function for generating signing deeplinks (#8385)Ross Zurowski2-15/+121
2023-06-13tka: provide verify-deeplink local API endpoint (#8303)Andrea Gottardo1-0/+167
2023-05-25tka: fix go vet complaint on copy of lock value in tailchonk_test.go (#8208)valscale1-1/+11
2023-04-17various: add golangci-lint, fix issues (#7905)Andrew Dunham6-15/+15
2023-03-03tka: compact TKA storage on startupTom DNetto4-5/+242
2023-03-01tka: implement compaction logicTom DNetto2-0/+750
2023-02-23tka: add public API on NodeKeySignature key informationTom DNetto1-0/+21
2023-01-27all: update copyright and license headersWill Norris18-54/+36
2023-01-04cmd/tailscale,tka: make KeyID return an error instead of panickingTom DNetto11-51/+104
2023-01-04cmd/tailscale,tka: implement compat for TKA messages, minor UX tweaksTom DNetto2-9/+17
2022-11-29cmd/tailscale,ipn: store disallowed TKA's in prefs, lock local-disableTom DNetto1-0/+7
2022-11-29Revert "ipn,types/persist: store disallowed TKA's in prefs, lock local-disable"Brad Fitzpatrick1-5/+0
2022-11-29ipn,types/persist: store disallowed TKA's in prefs, lock local-disableTom DNetto1-0/+5
2022-11-22ipn/ipnlocal,tka: generate a nonce for each TKATom DNetto2-1/+31
2022-11-11cmd/tailscale,ipn: minor fixes to tailscale lock commandsTom DNetto2-0/+20
2022-10-26tka, types/key: add NLPublic.KeyIDAdrian Dewhurst1-0/+38
2022-10-17tka: make rotation signatures use nested keyIDTom DNetto3-5/+38
2022-10-05ipn/ipnlocal,tka: Fix bugs found by integration testingTom DNetto1-0/+4
2022-09-29all: fix spelling mistakesJosh Soref3-9/+9
2022-09-29ipn/ipnlocal, tka: Implement TKA synchronization with the control planeTom DNetto2-0/+15
2022-09-26tka: Checkpoint every 50 updatesTom DNetto4-11/+131
2022-09-21control/controlclient,ipn/ipnlocal: wire tka enable/disableTom DNetto7-14/+26
2022-09-15refactor: move from io/ioutil to io and os packagesEng Zer Jun1-2/+1
2022-08-31tka: implement credential signatures (key material delegation)Tom DNetto3-27/+153
2022-08-30tka: validate key after UpdateKey before applying stateTom DNetto2-2/+10
2022-08-26tka: make storage a parameter rather than an Authority struct memberTom DNetto6-107/+143
2022-08-25tka: move disablement logic out-of-band from AUMsTom DNetto7-74/+54
2022-08-24tka: optimize common case of processing updates built from headTom DNetto2-13/+85
2022-08-24tka: support rotating node-keys in node-key signaturesTom DNetto4-23/+280
2022-08-22client,cmd/tailscale,ipn,tka,types: implement tka initialization flowTom DNetto6-9/+13
2022-08-15tka: Use strict decoding settings, implement Unserialize()Tom DNetto7-10/+89
2022-08-08tka: stable text representation of AUMHashDavid Crawshaw3-28/+53
2022-08-04tka,types/key: remove dependency for tailcfg & types/ packages on tkaTom DNetto12-50/+56
2022-08-03tka,types/key: implement direct node-key signaturesTom DNetto3-0/+150
2022-08-03tka: add attack-scenario unit tests, defensive checks, resolve TODOsTom DNetto3-57/+189