wireguard-apple/Sources/WireGuardKit, branch am/develop

Kit: make it possible to opt-out from automatically raising the reasserting flag.

2022-02-21T14:54:49Z

Signed-off-by: Andrej Mihajlov

Kit: Adapter: ignore error when updating tunnel settings in offline

2021-12-20T15:21:34Z

Since around iOS 15.1, calling `setNetworkSettings()` when in airplane mode, throws an unknown error: Error Domain=NEAgentErrorDomain Code=1 Signed-off-by: Andrej Mihajlov

Global: bump copyright year

2021-06-17T14:56:46Z

Signed-off-by: Jason A. Donenfeld

Kit: add missing import for WireGuardKitC

2021-06-17T13:15:41Z

Signed-off-by: Andrej Mihajlov

Kit: Adapter: use more reliable utun detection technique

2021-06-16T15:40:12Z

Rather than hoping that the AF_SYSTEM fd is of type utun, and then calling "2" on it to get the name -- which could be defined as something else for a different AF_SYSTEM socket type -- instead simply query the AF_SYSTEM control socket ID with getpeername. This has one catch, which is that the ID is dynamically allocated, so we resolve it using the qualified name. Normally we'd make a new AF_SYSTEM socket for this, but since that's not allowed in the sandbox, we reuse the AF_SYSTEM socket that we're checking. At this point in the flow, we know that it's a proper AF_SYSTEM one, based on the first sockaddr member; we just don't know that it's a utun variety. Signed-off-by: Jason A. Donenfeld

Kit: Adapter: iterate through all FDs to find UTUN

2021-06-16T13:56:21Z

This is a bit of a kludge, until I find something better. We simply iterate through all FDs, and call getsockopt on each one until we find the utun FD. This works, and completes rather quickly (fd is usually 6 or 7). Rather than maintain the old path for older kernels, just use this for all versions, to get more coverage. Other techniques involve undocumented APIs; this one has the advantage of using nothing undocumented. Signed-off-by: Jason A. Donenfeld

SPM: update exclude rules

2021-06-16T13:23:11Z

Fixes missing excluded file warning in Xcode. api-ios.go was renamed to api-apple.go. Signed-off-by: Andrej Mihajlov

Kit: Go: bump to latest API

2021-03-09T16:10:04Z

Signed-off-by: Jason A. Donenfeld

Kit: netcfg: add explicit IP mask routes

2021-01-01T17:28:14Z

macOS will use the wrong source address unless we add explicit routes that mention the self-pointing gateway. Actually, it won't add any implicit routes on its own, so in order to route the masks of the addresses, we have to add our own routes explicitly. However, this still doesn't fix the problem while inside of the network extension, even though it works outside it. Signed-off-by: Jason A. Donenfeld

Kit: do not crash on [abcd::] with missing port

2020-12-23T13:06:26Z

Signed-off-by: Jason A. Donenfeld