wireguard-apple/Sources/WireGuardKit/WireGuardAdapter.swift, branch am/codable-ipaddress-range

Global: bump copyright year

2021-06-17T14:56:46Z

Signed-off-by: Jason A. Donenfeld

Kit: add missing import for WireGuardKitC

2021-06-17T13:15:41Z

Signed-off-by: Andrej Mihajlov

Kit: Adapter: use more reliable utun detection technique

2021-06-16T15:40:12Z

Rather than hoping that the AF_SYSTEM fd is of type utun, and then calling "2" on it to get the name -- which could be defined as something else for a different AF_SYSTEM socket type -- instead simply query the AF_SYSTEM control socket ID with getpeername. This has one catch, which is that the ID is dynamically allocated, so we resolve it using the qualified name. Normally we'd make a new AF_SYSTEM socket for this, but since that's not allowed in the sandbox, we reuse the AF_SYSTEM socket that we're checking. At this point in the flow, we know that it's a proper AF_SYSTEM one, based on the first sockaddr member; we just don't know that it's a utun variety. Signed-off-by: Jason A. Donenfeld

Kit: Adapter: iterate through all FDs to find UTUN

2021-06-16T13:56:21Z

This is a bit of a kludge, until I find something better. We simply iterate through all FDs, and call getsockopt on each one until we find the utun FD. This works, and completes rather quickly (fd is usually 6 or 7). Rather than maintain the old path for older kernels, just use this for all versions, to get more coverage. Other techniques involve undocumented APIs; this one has the advantage of using nothing undocumented. Signed-off-by: Jason A. Donenfeld

SPM: update exclude rules

2021-06-16T13:23:11Z

Fixes missing excluded file warning in Xcode. api-ios.go was renamed to api-apple.go. Signed-off-by: Andrej Mihajlov

Kit: Go: bump to latest API

2021-03-09T16:10:04Z

Signed-off-by: Jason A. Donenfeld

Kit: Adapter: do not treat NE settings timeouts as fatal

2020-12-16T23:26:00Z

The general Network Extension framework is incredibly buggy, and a timeout when setting the network settings does not necessarily imply that the whole operation failed. Simply log the condition and move on. This restores the app's old behavior. Reported-by: Filipe Mendonça Signed-off-by: Jason A. Donenfeld

WireGuardKitGo: update to latest wireguard-go tag

2020-12-15T12:16:52Z

Signed-off-by: Jason A. Donenfeld

WireGuardKit: Let wireguard-go backend run in offline on macOS

2020-12-11T10:56:05Z

Signed-off-by: Andrej Mihajlov

WireGuardKit: Conditionally turn on/off wireguard-go

2020-12-11T10:15:22Z

Signed-off-by: Andrej Mihajlov