Adam Ierymenko
|
134d33c218
Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring.
|
4 жил өмнө |
Adam Ierymenko
|
06730c7d1d
BSL date bump
|
5 жил өмнө |
Adam Ierymenko
|
633cf9ec04
Warning removal
|
6 жил өмнө |
Adam Ierymenko
|
e8ae333443
Version bumps, license fixed, and GitHub issue #990 take two
|
6 жил өмнө |
Adam Ierymenko
|
52a166a71f
Relicense: GPLv3 -> ZeroTier BSL 1.1
|
6 жил өмнө |
Adam Ierymenko
|
639fc60257
GitHub issue #990
|
6 жил өмнө |
Adam Ierymenko
|
75ebe5172f
Fix for sharing of capabilities in 1.4 (problem introduced when push frequency was reduced)
|
6 жил өмнө |
Adam Ierymenko
|
a019c3dd5d
Tighten up credential push just a bit for faster up-time with older nodes, should not have significant impact on bandwidth. Also some cleanup and push direct path timing fixes.
|
6 жил өмнө |
Adam Ierymenko
|
39e1021f62
Replace certificate based gating of multicast like/gather with a simpler more efficient method, fix some minor issues with request based com/cert push, and clean up some other random stuff.
|
6 жил өмнө |
Adam Ierymenko
|
63ec19674c
.
|
6 жил өмнө |
Joseph Henry
|
0e597191b8
Updated licenses for 2019
|
6 жил өмнө |
Adam Ierymenko
|
b3c2c0866f
Times should be int64_t, not uint64_t
|
7 жил өмнө |
Adam Ierymenko
|
65c07afe05
Copyright updates for 2018.
|
8 жил өмнө |
Grant Limberg
|
099bedd2e9
A few more uint64_t -> int64_t changes for timestamps
|
8 жил өмнө |
Grant Limberg
|
b1d60df44c
timestamps changed from uint64_t to int64_t
|
8 жил өмнө |
Adam Ierymenko
|
495c5ce81d
Bunch of remote tracing work.
|
8 жил өмнө |
Adam Ierymenko
|
1b68d6dbdc
License header update.
|
8 жил өмнө |
Adam Ierymenko
|
5ad120208f
Small fix, should filter by temporal validity.
|
8 жил өмнө |
Adam Ierymenko
|
eddbc7e757
Logic simplification, cleanup, and memory use improvements in Membership. Also fix an issue that may cause network instability in some cases.
|
8 жил өмнө |
Adam Ierymenko
|
8a62ba07e5
Membership cleanup work in progress.
|
8 жил өмнө |
Adam Ierymenko
|
e4896b257f
Add thread PTR that gets passed through the entire ZT core call stack and then passed to handler functions resulting from a call.
|
8 жил өмнө |
Adam Ierymenko
|
5e6a4e5f5e
Send revocations automatically on deauth for instant kill, also fix some issues with the RP.
|
8 жил өмнө |
Adam Ierymenko
|
72653e54f9
Finish wiring up ipauth and macauth to Network filter.
|
8 жил өмнө |
Adam Ierymenko
|
10185e92fa
Certificate of ownership -- used to secure against IP address spoofing, especially for IPv4 and regular IPv6.
|
8 жил өмнө |
Adam Ierymenko
|
78d548458b
Capabilities basically work but need to refactor a bit for performance reasons.
|
8 жил өмнө |
Adam Ierymenko
|
eac3667ec1
Bunch more refactoring and work on revocations, etc.
|
9 жил өмнө |
Adam Ierymenko
|
1f74dd4589
Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network.
|
9 жил өмнө |
Adam Ierymenko
|
d3524f3609
Refactor COM stuff a bit, and respond to COM requests a bit more readily for rapid setup. Will need to revisit later.
|
9 жил өмнө |
Adam Ierymenko
|
0d4109a9f1
More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
|
9 жил өмнө |
Adam Ierymenko
|
16df2c3363
Clean up handling of COMs, network access control, and fix a backward compatiblity issue.
|
9 жил өмнө |