aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/.gitignore (unfollow)
Commit message (Collapse)AuthorFilesLines
2018-09-04global: prefer sizeof(*pointer) when possibleJason A. Donenfeld3-13/+13
Suggested-by: Sultan Alsawaf <sultanxda@gmail.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-09-03crypto: import zincJason A. Donenfeld2-3/+3
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-09-02wg: ipc: do not warn on unrecognized netlink attributesJason A. Donenfeld1-17/+0
It makes extending things more difficult. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-08-28crypto: use unaligned helpersJason A. Donenfeld1-0/+3
This is not useful for WireGuard, but for the general use case we probably want it this way, and the speed difference is mostly lost in the noise. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-08-21wg-quick: check correct variable for route deduplicationJason A. Donenfeld1-1/+1
Reported-by: John Sager <john@sager.me.uk> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-08-12wg-quick: darwin: prefer system paths for toolsJason A. Donenfeld1-1/+1
The only things wg-quick(8) needs from Homebrew are bash(1) and wg(8). Other than that, it's explicitly coded against the native system utilities. Since wg-quick(8) and bash(1) are invoked in auto_su by their full absolute path (via $SELF and $BASH, respectively), we can simply set the $PATH to be prefixed by the default system binary paths. This way, if users install tools that conflict with system tools -- such as GNU coreutils -- we won't accidently call those. Reported-by: Deirdre Connolly <durumcrustulum@gmail.com> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-07-24wg-quick: android: remove compat codeJason A. Donenfeld1-10/+0
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-07-24wg-quick: android: allow package to be overriddenJason A. Donenfeld1-4/+9
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-07-24embeddable-wg-library: do not left shift negative numbersJason A. Donenfeld1-7/+2
Otherwise we incur undefined behavior. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-07-16wg-quick: allow link local default gatewayJason A. Donenfeld3-3/+0
It's unclear why it was like this in the first place, but it apparently broke certain IPv6 setups. Reported-by: Jonas Blahut <j@die-blahuts.de> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-07-08wg: only error on wg show if all interfaces failJason A. Donenfeld1-1/+4
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-07-05wg-quick: android: support excluding applicationsJason A. Donenfeld1-9/+102
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-25wg-quick: android: prevent outgoing handshake packets from being droppedJason A. Donenfeld1-0/+4
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-22wg: fix misspelling of strchrnul in commentJonathan Neuschäfer1-1/+1
Signed-off-by: Jonathan Neuschäfer <j.neuschaefer@gmx.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-22manpages: eliminate whitespace at the end of the lineJonathan Neuschäfer2-26/+26
This eliminates a few style warnings from "mandoc -T lint src/tools/wg*.8". Signed-off-by: Jonathan Neuschäfer <j.neuschaefer@gmx.net> Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-17wg-quick: android: don't forget to free compiled regexesJason A. Donenfeld1-5/+6
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-17wg-quick: android: disable roaming to v6 networks when v4 is specifiedJason A. Donenfeld1-1/+54
This works around an unfortunate bug in 464XLAT transitions. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-17dns-hatchet: apply resolv.conf's selinux context to new resolv.confJason A. Donenfeld1-0/+2
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-14wg: getentropy requires 10.12Jason A. Donenfeld1-1/+7
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-08wg: support getentropy(3)Jason A. Donenfeld1-0/+11
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-06wg: encoding: add missing static array constraintsJason A. Donenfeld3-5/+5
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-06-04wg-quick: android: change name of intentJason A. Donenfeld1-1/+1
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-31wg-quick: android: delay setting users until endJason A. Donenfeld1-1/+6
`ndc users add` eventually invokes SOCK_DESTROY on user sockets, causing them to reconnect. By delaying this until after routes are set, we ensure that the sockets reconnect using the tunnel, rather than the old route. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-31wg: constanter time encodingJason A. Donenfeld2-22/+28
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-31wg-quick: darwin: set DNS servers after delay on route changeJason A. Donenfeld1-2/+6
This works around a race condition in macOS's network daemons, while also adding one in the form of possibly calling kill -ALRM on a stale PID; unfortunately bash can't wait from a trap. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-27wg-quick: freebsd: configure as p2p linkJason A. Donenfeld1-3/+5
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-27wg-quick: darwin: add multiple IP addressesJason A. Donenfeld1-2/+2
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-27wg-quick: determine IPs when saving interfaceJason A. Donenfeld3-12/+14
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-24wg-quick: freebsd: work around security vulnerabilities in bashJason A. Donenfeld1-7/+29
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-23wg-quick: allow enumeration of socket filesJason A. Donenfeld2-2/+2
These OSes have an unpriv'd ifconfig, so this isn't an even larger info leak. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-23wg-quick: better bash completion for non-renaming OSesJason A. Donenfeld1-5/+14
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-23wg-quick: support FreeBSD/Darwin search pathJason A. Donenfeld4-16/+39
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-05-23wg: always pass -v as first argument to installJason A. Donenfeld1-7/+7
This lets crippled OSes sed out our -v more easily. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>