| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| | |
|
| |
|
|
|
|
|
|
|
|
|
| |
We want to enforce the relation between the socket name and the service
name, especially since the wintun adapter name might get a 1 or 2
appended depending on weird Nci duplication detection. So we just stick
with the configuration-given name throughout. Also, the user can change
the adapter name at runtime, which is all the more reason why maybe we
shouldn't care about it so much.
Reported-by: Nenad Kozul <me@nenadkozul.com>
|
| | |
|
| | |
|
| |
|
|
|
|
| |
If the config file is unencrypted and its owner is not Local System,
then we allow the runtime named pipe to be accessed by that owner, since
generally the private key is already stored in the config file.
|
| |
|
|
|
|
| |
This helps fix startup races without needing to poll, as well as
reconfiguring interfaces after wintun destroys and re-adds. It also
deals gracefully with IPv6 being disabled.
|
| |
|
|
|
|
| |
This allows NLA profiles to securely bind public keys to firewall
profiles, a considerable improvement on the usual insecure Windows
situation.
|
| | |
|
| |
|
|
|
| |
Otherwise creating the wintun service deadlocks the entire SCM on
Windows 8.1.
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
| |
The services which do not advertise they accept shutdown signal from SCM
are killed on shutdown.
This commit establishes a full tunnel cleanup (i.e. delete the adapter)
on shutdown. Otherwise, the Wintun adapter is deleted on next boot as a
part of the regular sanitation procedure.
Signed-off-by: Simon Rozman <simon@rozman.si>
|
| |
|
|
| |
This is a big loss. We'll need to revisit this.
|
| | |
|
| |
|
|
|
|
|
|
| |
We'll maintain this as part of the same repo here. Later maybe we'll
push it into x/sys/windows.
Signed-off-by: Simon Rozman <simon@rozman.si>
Signed-off-by: Aleksandar Pesic <peske.nis@gmail.com>
|
| | |
|
| |
|
Jason A. Donenfeld
Simon Rozman