aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/tunnel (follow)
Commit message (Collapse)AuthorAgeFilesLines
* winipcfg: prefer own methods over direct API callsSimon Rozman2019-06-111-2/+2
| | | | Signed-off-by: Simon Rozman <simon@rozman.si>
* tunnel: generate GUIDs deterministicallyJason A. Donenfeld2019-06-102-1/+74
| | | | | | This allows NLA profiles to securely bind public keys to firewall profiles, a considerable improvement on the usual insecure Windows situation.
* tunnel: SCM lock status is upstream nowJason A. Donenfeld2019-06-091-32/+11
|
* tunnel: release SCM locks by faking an early start before wintun initJason A. Donenfeld2019-06-071-0/+35
| | | | | Otherwise creating the wintun service deadlocks the entire SCM on Windows 8.1.
* firewall: GUID generation is now upstreamJason A. Donenfeld2019-06-072-16/+2
|
* global: cleanup TODO comment spacingJason A. Donenfeld2019-06-075-6/+6
|
* tunnel: perform full stop on shutdownSimon Rozman2019-06-071-2/+2
| | | | | | | | | | | The services which do not advertise they accept shutdown signal from SCM are killed on shutdown. This commit establishes a full tunnel cleanup (i.e. delete the adapter) on shutdown. Otherwise, the Wintun adapter is deleted on next boot as a part of the regular sanitation procedure. Signed-off-by: Simon Rozman <simon@rozman.si>
* tunnel: retain SeLoadDriverPrivilegeJason A. Donenfeld2019-06-071-2/+2
| | | | This is a big loss. We'll need to revisit this.
* tunnel: don't fail on v6 family lookup unless using v6Jason A. Donenfeld2019-06-071-14/+16
|
* services: iterate through groups using helperJason A. Donenfeld2019-06-071-2/+1
|
* tunnel: fix formattingJason A. Donenfeld2019-06-072-3/+3
|
* tunnel: make tcp/ip waiting explicitJason A. Donenfeld2019-05-313-18/+27
|
* firewall: use random GUIDsJason A. Donenfeld2019-05-312-20/+27
|
* tunnel: logical simplificationJason A. Donenfeld2019-05-291-1/+1
|
* tunnel: allow for disabled ipv6Jason A. Donenfeld2019-05-291-14/+12
|
* global: several helpers are now upstreamJason A. Donenfeld2019-05-271-11/+1
|
* winipcfg: make LUID.DeleteIPAddress accept IPNetSimon Rozman2019-05-273-4/+10
| | | | | | Thou DeleteUnicastIpAddressEntry() cares about the IP only. Signed-off-by: Simon Rozman <simon@rozman.si>
* global: use filepath.Join uniformlyJason A. Donenfeld2019-05-251-1/+2
|
* winipcfg: SocketAddressToIP was upstreamedJason A. Donenfeld2019-05-253-30/+4
|
* winipcfg: switch to windows.GetAdaptersAddressesSimon Rozman2019-05-242-11/+1
| | | | Signed-off-by: Simon Rozman <simon@rozman.si>
* winipcfg: add note describing how to setup winipcfg testing environmentSimon Rozman2019-05-231-0/+16
| | | | | | | ...to save us head-scratching time when trying to run the tests again few months later. Signed-off-by: Simon Rozman <simon@rozman.si>
* winipcfg: importJason A. Donenfeld2019-05-2219-63/+4479
| | | | | | | | We'll maintain this as part of the same repo here. Later maybe we'll push it into x/sys/windows. Signed-off-by: Simon Rozman <simon@rozman.si> Signed-off-by: Aleksandar Pesic <peske.nis@gmail.com>
* tunnel: disable firewall before destroying wintunJason A. Donenfeld2019-05-221-0/+2
| | | | Otherwise there's a tiny race.
* tunnel: remove routes before destroying interfaceJason A. Donenfeld2019-05-222-1/+17
|
* firewall: use service-specific SIDJason A. Donenfeld2019-05-226-46/+146
|
* service: split into tunnel and managerJason A. Donenfeld2019-05-2013-0/+3505
Copyright © 1996 – 2026 Jason A. Donenfeld. All Rights Reverse Engineered.