Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | wg-quick: freebsd: work around security vulnerabilities in bash | Jason A. Donenfeld | 2018-05-24 | 1 | -7/+29 |
| | |||||
* | wg-quick: allow enumeration of socket files | Jason A. Donenfeld | 2018-05-23 | 2 | -2/+2 |
| | | | | | These OSes have an unpriv'd ifconfig, so this isn't an even larger info leak. | ||||
* | wg-quick: better bash completion for non-renaming OSes | Jason A. Donenfeld | 2018-05-23 | 1 | -5/+14 |
| | |||||
* | wg-quick: support FreeBSD/Darwin search path | Jason A. Donenfeld | 2018-05-23 | 4 | -16/+39 |
| | |||||
* | tools: always pass -v as first argument to install | Jason A. Donenfeld | 2018-05-23 | 1 | -7/+7 |
| | | | | This lets crippled OSes sed out our -v more easily. | ||||
* | wg-quick: openbsd: add new implementation | Jason A. Donenfeld | 2018-05-22 | 1 | -0/+451 |
| | |||||
* | wg-quick: freebsd: add new implementation | Jason A. Donenfeld | 2018-05-22 | 2 | -16/+434 |
| | |||||
* | wg-quick: darwin: do not remove routes when no real interface | Jason A. Donenfeld | 2018-05-22 | 1 | -0/+1 |
| | |||||
* | wg-quick: darwin: rename namefile environment variable | Jason A. Donenfeld | 2018-05-22 | 1 | -1/+1 |
| | | | | This paves the way for an openbsd implementation. | ||||
* | tools: fix OpenBSD build | Filippo Valsorda | 2018-05-22 | 4 | -2/+4 |
| | | | | | License: MIT Signed-off-by: Filippo Valsorda <valsorda@google.com> | ||||
* | tools: fix errno propagation and messages | Jason A. Donenfeld | 2018-05-18 | 5 | -9/+8 |
| | |||||
* | wg-quick: darwin: simpler inclusion check | Jason A. Donenfeld | 2018-05-17 | 1 | -1/+1 |
| | |||||
* | wg-quick: darwin: reorder functions | Jason A. Donenfeld | 2018-05-17 | 1 | -19/+19 |
| | |||||
* | wg-quick: darwin: networksetup does not like missing stdio | Jason A. Donenfeld | 2018-05-17 | 1 | -1/+1 |
| | |||||
* | wg-quick: darwin: avoid routing loop if no default | Jason A. Donenfeld | 2018-05-17 | 1 | -6/+16 |
| | |||||
* | wg-quick: darwin: sometimes there are no network services | Jason A. Donenfeld | 2018-05-17 | 1 | -2/+1 |
| | |||||
* | wg-quick: use invoking shell in auto rooting | Jason A. Donenfeld | 2018-05-16 | 2 | -2/+3 |
| | |||||
* | wg-quick: add intentionally undocumented userspace implementation knob | Jason A. Donenfeld | 2018-05-16 | 2 | -3/+3 |
| | | | | | | This knob might disappear at some point, and we don't want to encourage its use, so it's not being documented, but this should help with development of new implementations. | ||||
* | wg-quick: darwin: use bash from environment and require bash 4+ | Jason A. Donenfeld | 2018-05-16 | 2 | -23/+23 |
| | | | | | | For properly configured Homebrew installations /usr/local/bin should be before /bin, so this should still work. This allows the script to be used in more than one setting. | ||||
* | wg-quick: darwin: restore DNS on down | Jason A. Donenfeld | 2018-05-16 | 1 | -13/+25 |
| | |||||
* | wg-quick: darwin: bash correctness | Jason A. Donenfeld | 2018-05-16 | 1 | -5/+4 |
| | |||||
* | wg-quick: darwin: remove v6 routes after shutdown | Jason A. Donenfeld | 2018-05-16 | 1 | -3/+3 |
| | | | | This works around a Darwin kernel bug regarding interface removal. | ||||
* | wg-quick: darwin: ensure socket directory exists | Jason A. Donenfeld | 2018-05-16 | 1 | -5/+1 |
| | |||||
* | wg-quick: add darwin implementation | Jason A. Donenfeld | 2018-05-15 | 1 | -0/+444 |
| | | | | It's pretty rough and leaves much to be desired, but it works. | ||||
* | wg-quick: add wg symlink | Jason A. Donenfeld | 2018-05-14 | 1 | -0/+1 |
| | |||||
* | wg-quick: add android implementation | Jason A. Donenfeld | 2018-05-14 | 1 | -0/+666 |
| | |||||
* | tools: reorganize for multiplatform wg-quick | Jason A. Donenfeld | 2018-05-14 | 5 | -7/+9 |
| | |||||
* | wg-quick: preliminary support for go implementation | Jason A. Donenfeld | 2018-05-10 | 1 | -1/+7 |
| | |||||
* | wg-quick: account for specified fwmark in auto routing mode | Jason A. Donenfeld | 2018-04-15 | 1 | -19/+23 |
| | | | | | | | | | | | If we're doing automatic routing with default routes, but the config has also specified an explicit fwmark, then use that explicit fwmark, even if it's conflicting, since the administrator has explicitly opted into using it. Also, when shutting down the interface, we only now remove the fancy rules if we're in automatic routing mode with default routes. Suggested-by: Luis Ressel <aranea@aixah.de> Reported-by: Saeid Akbari <saeidscorp@yahoo.com> | ||||
* | wg-quick.8: fix typo | Jason A. Donenfeld | 2018-04-04 | 1 | -1/+1 |
| | | | | Reported-by: Mike Pechkin <mike.pechkin@gmail.com> | ||||
* | wg-quick: hide errors on save | Jason A. Donenfeld | 2018-03-04 | 1 | -1/+1 |
| | |||||
* | wg-quick: if resolvconf/run/iface exists, use it | Jason A. Donenfeld | 2018-03-04 | 1 | -1/+1 |
| | | | | | Some older broken resolvconfs don't support resolvconf -l, but do have a file in a standard location, so use it. | ||||
* | wg-quick: if resolvconf/interface-order exists, use it | Jason A. Donenfeld | 2018-03-04 | 1 | -3/+12 |
| | | | | | | | Some older broken resolvconf implementations ignore -m, but do have an interface-order list. It's better to use this list dynamically, in case it changes, or in case it's not used by the OS's resolvconf implementation, such as in the case of systemd or openresolv. | ||||
* | global: in gnu code, use un-underscored asm | Jason A. Donenfeld | 2018-03-02 | 2 | -2/+2 |
| | |||||
* | tools: fixup errno handling | Jason A. Donenfeld | 2018-02-17 | 2 | -8/+8 |
| | |||||
* | tools: FreeBSD doesn't have EAI_NODATA | Jason A. Donenfeld | 2018-02-17 | 1 | -2/+15 |
| | |||||
* | tools: do not collide types with libc clashes | Jason A. Donenfeld | 2018-02-17 | 1 | -4/+10 |
| | |||||
* | wg(8): clarify phrasing | Jason A. Donenfeld | 2018-02-17 | 1 | -3/+3 |
| | |||||
* | tools: allow in-line comments | Jason A. Donenfeld | 2018-02-17 | 3 | -11/+17 |
| | |||||
* | tools: normalize strncpy/snprintf usage | Jason A. Donenfeld | 2018-02-14 | 4 | -18/+22 |
| | |||||
* | wg-quick: match from beginning rather than shift right | Jason A. Donenfeld | 2018-02-06 | 1 | -2/+2 |
| | | | | | Before, this meant that it simply took the last 15 characters, instead of erroring out when there's more than 15 chars. | ||||
* | tools: endian.h is not portable | Jason A. Donenfeld | 2018-02-05 | 1 | -4/+9 |
| | |||||
* | curve25519: replace fiat64 with faster hacl64 | Jason A. Donenfeld | 2018-02-01 | 1 | -3/+3 |
| | | | | | This reverts commit da4ff396cc5d5e0ff21f9ecbc2f951c048c63fff and adds some optimizations to hacl64. | ||||
* | curve25519: replace hacl64 with fiat64 | Jason A. Donenfeld | 2018-02-01 | 1 | -8/+3 |
| | | | | | | | | | | For now, it's faster: hacl64: 109782 cycles per call fiat64: 108984 cycles per call It's quite possible this commit will be reverted with nice changes from INRIA, though. | ||||
* | tools: dedup secret normalization | Jason A. Donenfeld | 2018-01-31 | 1 | -7/+1 |
| | |||||
* | tools: fread doesn't change errno | Jason A. Donenfeld | 2018-01-30 | 1 | -4/+0 |
| | | | | | Thus we might be responding to an old errno, which could cause this to unnecessarily fail. | ||||
* | tools: share curve25519 implementations with kernel | Jason A. Donenfeld | 2018-01-23 | 1 | -1539/+30 |
| | |||||
* | curve25519-fiat32: uninline certain functions | Jason A. Donenfeld | 2018-01-18 | 1 | -4/+4 |
| | | | | | | | | | | | While this has a negative performance impact on x86_64, it has a positive performance impact on smaller machines, which is where we're actually using this code. For example, an A53: Before: fiat32: 228605 cycles per call After: fiat32: 188307 cycles per call | ||||
* | tools: import new curve25519 implementations | Jason A. Donenfeld | 2018-01-18 | 1 | -1129/+1423 |
| | |||||
* | tools: plug memleak in config error path | Jason A. Donenfeld | 2018-01-18 | 1 | -0/+1 |
| |