snow/wireguard-tools
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
129 commits 2 branches 0 tags 713 KiB
Commit graph

93 commits

Author SHA1 Message Date
Jason A. Donenfeld 41e50edbe5 wg-quick: do not use grep 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-07-24 23:22:10 +02:00
Jason A. Donenfeld 11204afd6f wg-quick: do not set explicit src route for v6 default route 
This was only required because clueless network operators were trying to
route fec0::/10 globally, when that range doesn't actually have global
scope. Now that we understand the cause was operator error, we revert
the change here, so that the routing table is kept consistent.

This reverts commit 64e47de870a2f0575b5564a70e5680b48ab83ff9.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-07-24 23:19:38 +02:00
Jason A. Donenfeld 077dac0514 wg-quick: usage typos 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-07-20 06:48:57 +02:00
Jason A. Donenfeld aad91ae679 global: wireguard.io --> wireguard.com 
Due to concerns with the .io TLD, we are switching to using
wireguard.com instead.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-07-20 03:37:39 +02:00
Jason A. Donenfeld e22155a3b7 wg: remove double include in ipc 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-29 14:34:27 +02:00
Jason A. Donenfeld d3ebbaccab wg-quick: use printf -v instead of namerefs for bash 4.2 
I'm not happy about this.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-28 05:28:54 +02:00
Jason A. Donenfeld cf4b3ebd08 wg-quick: properly match IPv6 endpoint 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-24 02:06:26 +02:00
Jason A. Donenfeld f90f8f33a7 wg: use proper __linux__ ifdef 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-12 17:02:12 +02:00
Jason A. Donenfeld eaa64b198b wg-quick: match ipv6 default route more broadly 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-12 00:20:31 +02:00
Jason A. Donenfeld 1b5234f3d5 wg-quick: make sure we have empty table for both v6 and v4 
Otherwise, we wind up not doing the right thing in the v6-only case, or
doing something totally borked when v4 and v6 are filled unevenly.

Reported-by: Roelf Wichertjes <contact@roelf.org>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-11 23:39:17 +02:00
Jason A. Donenfeld 32afe0e220 wg: allow creating device with no peers 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-31 05:35:34 +02:00
Jason A. Donenfeld f65fba7dd8 man: update wg-quick(8) to show Debian resolvconf braindamage 
While OpenResolv supports explicit ordering directives such as `-m` and
exclusivity directives such as `-x`, Debian's own resolvconf supports
none of this, instead using a hard coded list of interface name
templates for determining ordering. While trying to emulate `-x` is
difficult [*], we can at least try to mostly emulate `-m 0` by
masquerading as a `tun*` interface to resolvconf. Ugly, but it works.

[*] One heavy handed way of emulating `-x` would be something like:

   # echo nameserver 8.8.8.8 > /etc/resolv.conf.wg0-exclusive
   # mount --bind -o ro /etc/resolv.conf.wg0-exclusive /etc/resolv.conf
   # rm -f /etc/resolv.conf.wg0-exclusive

This in practice works quite well, but is a bit heavy to put in a man
page. It also doesn't "stack" well. For example, if we simply run
`umount /etc/resolv.conf`, how do we know which resolv.conf entry we're
unmounting?

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-30 18:07:28 +02:00
Jason A. Donenfeld 682b15cb5e wg-quick: use src routing for default routes in v6 
Otherwise, traffic is sent with the IP address of a different interface,
and then packets don't actually get delivered.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-18 14:41:34 +02:00
Jason A. Donenfeld 641b479b44 man: fix psk mention in wg-quick man page 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-18 14:41:24 +02:00
Jason A. Donenfeld 3a7be3fac5 wg: opt-in globally to GNU-isms to keep the BSDs happy 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:34:23 +02:00
Jason A. Donenfeld 945fae0c7c wg: support text-based ipc 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:13:14 +02:00
Jason A. Donenfeld c3b2dbcdb0 wg: check for proto error on set too 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld 067ebe2cb9 wg: stricter key file reading 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld fabb6eca2b noise: redesign preshared key mode 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld 13db708a0f wg-quick: auto MTU discovery 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld 83223f8e4c wg: retry name resolution on temporary failure 
This should solve many problems at init time.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld c98c415bd1 wg: no hyphen in preshared, to keep uniformity 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-04-20 22:53:00 +02:00
Jason A. Donenfeld 5fab6f18d5 wg: argc is always 1 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-04-19 18:26:32 +02:00
Jason A. Donenfeld 6a967c63a7 wg: check for malloc failure 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-04-19 18:26:32 +02:00
Jason A. Donenfeld 755217bd85 wg: side channel resistant base64 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-04-19 18:26:32 +02:00
Jason A. Donenfeld d42dd68add wg: do not use addrconfig with port in gai 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-28 10:46:31 +02:00
Jason A. Donenfeld 6d20c647d0 uapi: add version magic 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-24 04:44:27 +01:00
Jason A. Donenfeld a8803c17a7 wg-quick: various cleanups 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-24 04:44:27 +01:00
Jason A. Donenfeld 3067b59798 wg: document # comments in wg(8) man page 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-24 04:44:27 +01:00
Pim van Pelt ef66ea99e4 wg-quick: support old ip(8) 
Old versions of ip(8) do not accept arguments to `ip rule show.` This
patch works around that limitation.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-19 15:34:46 +01:00
Jason A. Donenfeld aefa5e8edc wg: fix bash completion spaces 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-23 07:09:49 +01:00
Jason A. Donenfeld bda4b8c60b wg: add wg show [interface] dump 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-23 07:09:49 +01:00
Jason A. Donenfeld d4edc7baa8 wg: give "off" value for fwmark 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-23 07:09:49 +01:00
Jason A. Donenfeld a9bcd0d401 wg-quick: allow config files without trailing newline 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-23 07:09:49 +01:00
Jason A. Donenfeld 6448d5557c wg-quick: unquote fwmark for bash 4.3 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-14 11:41:56 +01:00
Jason A. Donenfeld f60ceb76e6 wg-quick: set LC_ALL for consistent regex 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-13 21:55:18 +01:00
Jason A. Donenfeld c8472e2dab socket: enable setting of fwmark 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-13 21:55:18 +01:00
Jason A. Donenfeld ef29165cde socket: general ephemeral ports instead of name-based ports 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-13 21:55:17 +01:00
Jason A. Donenfeld cf2cb85a08 wg-quick: support v6 dual stack 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-13 21:55:17 +01:00
Jason A. Donenfeld 3606898d23 wg: remove key for any empty file 
Rather than just using /dev/null to mean key removal, match on any empty
file, so that this interface is cross platform.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-07 12:21:22 +01:00
Jason A. Donenfeld 666623a82e wg: setconf should remove existing psk 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-07 12:21:22 +01:00
Jason A. Donenfeld 4586e14749 wg-quick: recommend using resolvconf in exclusive mode 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-19 00:07:31 +01:00
Jason A. Donenfeld db4f06d118 wg: man: recommend correct port 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-15 22:22:45 +01:00
Jason A. Donenfeld 1d20912898 wg-quick: parse IPv6 endpoints correctly 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-15 13:01:06 +01:00
Jason A. Donenfeld 035a649641 wg-quick: better removal of suppress_prefix rule 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-11 00:29:58 +01:00
Jason A. Donenfeld 396dc76a04 Update copyright 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-10 06:36:19 +01:00
Jason A. Donenfeld f43b43376b uapi: use sockaddr union instead of sockaddr_storage 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-10 06:29:24 +01:00
Jason A. Donenfeld 48f7c3522a uapi: use flag instead of C bitfield for portability 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-10 05:36:43 +01:00
Jason A. Donenfeld 12904a1095 wg: ipc: read from socket incrementally 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-10 05:36:43 +01:00
Jason A. Donenfeld e92e0dca14 wg: error on short ret reads 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-10 05:36:43 +01:00