wireguard-windows/tunnel, branch jd/programdataWireGuard client for Windowshttps://git.zx2c4.com/wireguard-windows/atom/tunnel?h=jd%2Fprogramdata2019-06-11T16:15:16Zwinipcfg: prefer own methods over direct API calls2019-06-11T16:15:16ZSimon Rozmansimon@rozman.si2019-06-11T11:40:38Zurn:sha1:734b5d3765759d55082368c5cfd09517ea9f8392
Signed-off-by: Simon Rozman <simon@rozman.si>
tunnel: generate GUIDs deterministically2019-06-10T09:38:22ZJason A. DonenfeldJason@zx2c4.com2019-06-09T17:37:09Zurn:sha1:5ced3852cedfd863d8736a1a441cc2c68ce48e3c
This allows NLA profiles to securely bind public keys to firewall
profiles, a considerable improvement on the usual insecure Windows
situation.
tunnel: SCM lock status is upstream now2019-06-09T08:25:59ZJason A. DonenfeldJason@zx2c4.com2019-06-07T09:23:10Zurn:sha1:813c6c57c68db1f8d5d2d599649047c3552a8a59tunnel: release SCM locks by faking an early start before wintun init2019-06-07T09:31:53ZJason A. DonenfeldJason@zx2c4.com2019-06-06T13:24:18Zurn:sha1:ff61fbaba848fced5cc7f0d9568a0222eb7d39d8
Otherwise creating the wintun service deadlocks the entire SCM on
Windows 8.1.
firewall: GUID generation is now upstream2019-06-07T09:31:53ZJason A. DonenfeldJason@zx2c4.com2019-06-06T20:41:24Zurn:sha1:820515f324531251fd4eeb4798ab0df2bdc054a3global: cleanup TODO comment spacing2019-06-07T09:31:53ZJason A. DonenfeldJason@zx2c4.com2019-06-06T13:44:29Zurn:sha1:14dfc4e3e1925fcc3d303100c44ef4c321427c6btunnel: perform full stop on shutdown2019-06-07T09:31:53ZSimon Rozmansimon@rozman.si2019-06-05T08:42:50Zurn:sha1:6f15adbf30c94a078f84b4b8e362e339547a1464
The services which do not advertise they accept shutdown signal from SCM
are killed on shutdown.
This commit establishes a full tunnel cleanup (i.e. delete the adapter)
on shutdown. Otherwise, the Wintun adapter is deleted on next boot as a
part of the regular sanitation procedure.
Signed-off-by: Simon Rozman <simon@rozman.si>
tunnel: retain SeLoadDriverPrivilege2019-06-07T09:31:53ZJason A. DonenfeldJason@zx2c4.com2019-06-04T13:56:15Zurn:sha1:dfe247c7ccb9b87b998aed9de19485f6f0efebc1
This is a big loss. We'll need to revisit this.
tunnel: don't fail on v6 family lookup unless using v62019-06-07T09:31:53ZJason A. DonenfeldJason@zx2c4.com2019-06-04T08:23:27Zurn:sha1:98f965ce39292c1729b885caa3d27ace36672601services: iterate through groups using helper2019-06-07T09:31:53ZJason A. DonenfeldJason@zx2c4.com2019-05-27T15:32:14Zurn:sha1:7b12ceede2b28ebe5dc22a50cb69fae1e97577a1