snow/wireguard-tools
1
0
Fork 0
Code Issues Pull requests Releases Wiki Activity
123 commits 2 branches 0 tags 713 KiB
Commit graph

123 commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jason A. Donenfeld e22155a3b7 wg: remove double include in ipc 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-29 14:34:27 +02:00
Jason A. Donenfeld d3ebbaccab wg-quick: use printf -v instead of namerefs for bash 4.2 
I'm not happy about this.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-28 05:28:54 +02:00
Jason A. Donenfeld cf4b3ebd08 wg-quick: properly match IPv6 endpoint 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-24 02:06:26 +02:00
Jason A. Donenfeld e7fd4cfd3f haskell: re-add updated haskell example 
Code-from: John Galt <jgalt@centromere.net>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-24 02:06:26 +02:00
Jason A. Donenfeld f90f8f33a7 wg: use proper __linux__ ifdef 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-12 17:02:12 +02:00
Jason A. Donenfeld eaa64b198b wg-quick: match ipv6 default route more broadly 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-12 00:20:31 +02:00
Jason A. Donenfeld 1b5234f3d5 wg-quick: make sure we have empty table for both v6 and v4 
Otherwise, we wind up not doing the right thing in the v6-only case, or
doing something totally borked when v4 and v6 are filled unevenly.

Reported-by: Roelf Wichertjes <contact@roelf.org>
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-11 23:39:17 +02:00
Jason A. Donenfeld fbf715ea45 external-tests: trim the fat 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-09 02:56:08 +02:00
Jason A. Donenfeld bdbb6298a0 go test: use x/crypto for blake2s now that we have 128-bit mac 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-08 04:24:13 +02:00
Jason A. Donenfeld 9fbd187288 go test: correct tai64n and formatting 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-01 22:58:38 +02:00
Jason A. Donenfeld 19c89f3c3a external-tests: add keepalive packet 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-01 18:45:20 +02:00
Jason A. Donenfeld a1e931f9dc go test: properly pad message 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-06-01 06:31:26 +02:00
Jason A. Donenfeld 32afe0e220 wg: allow creating device with no peers 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-31 05:35:34 +02:00
Jason A. Donenfeld 8d8ea7a4fb rust test: add icmp ping 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-30 18:07:28 +02:00
Jake McGinty 2d8abfd5a0 rust test: convert screech test to snow 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-30 18:07:28 +02:00
Jason A. Donenfeld f65fba7dd8 man: update wg-quick(8) to show Debian resolvconf braindamage 
While OpenResolv supports explicit ordering directives such as `-m` and
exclusivity directives such as `-x`, Debian's own resolvconf supports
none of this, instead using a hard coded list of interface name
templates for determining ordering. While trying to emulate `-x` is
difficult [*], we can at least try to mostly emulate `-m 0` by
masquerading as a `tun*` interface to resolvconf. Ugly, but it works.

[*] One heavy handed way of emulating `-x` would be something like:

   # echo nameserver 8.8.8.8 > /etc/resolv.conf.wg0-exclusive
   # mount --bind -o ro /etc/resolv.conf.wg0-exclusive /etc/resolv.conf
   # rm -f /etc/resolv.conf.wg0-exclusive

This in practice works quite well, but is a bit heavy to put in a man
page. It also doesn't "stack" well. For example, if we simply run
`umount /etc/resolv.conf`, how do we know which resolv.conf entry we're
unmounting?

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-30 18:07:28 +02:00
Jason A. Donenfeld 682b15cb5e wg-quick: use src routing for default routes in v6 
Otherwise, traffic is sent with the IP address of a different interface,
and then packets don't actually get delivered.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-18 14:41:34 +02:00
Jason A. Donenfeld 641b479b44 man: fix psk mention in wg-quick man page 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-18 14:41:24 +02:00
Jason A. Donenfeld 3a7be3fac5 wg: opt-in globally to GNU-isms to keep the BSDs happy 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:34:23 +02:00
Jason A. Donenfeld 945fae0c7c wg: support text-based ipc 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:13:14 +02:00
Jason A. Donenfeld c3b2dbcdb0 wg: check for proto error on set too 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld 067ebe2cb9 wg: stricter key file reading 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld fabb6eca2b noise: redesign preshared key mode 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld 13db708a0f wg-quick: auto MTU discovery 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld 83223f8e4c wg: retry name resolution on temporary failure 
This should solve many problems at init time.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-05-17 18:07:42 +02:00
Jason A. Donenfeld c98c415bd1 wg: no hyphen in preshared, to keep uniformity 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-04-20 22:53:00 +02:00
Jason A. Donenfeld 5fab6f18d5 wg: argc is always 1 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-04-19 18:26:32 +02:00
Jason A. Donenfeld 6a967c63a7 wg: check for malloc failure 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-04-19 18:26:32 +02:00
Jason A. Donenfeld 755217bd85 wg: side channel resistant base64 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-04-19 18:26:32 +02:00
Jason A. Donenfeld d42dd68add wg: do not use addrconfig with port in gai 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-28 10:46:31 +02:00
Jason A. Donenfeld 6d20c647d0 uapi: add version magic 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-24 04:44:27 +01:00
Jason A. Donenfeld a8803c17a7 wg-quick: various cleanups 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-24 04:44:27 +01:00
Jason A. Donenfeld 3067b59798 wg: document # comments in wg(8) man page 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-24 04:44:27 +01:00
Pim van Pelt ef66ea99e4 wg-quick: support old ip(8) 
Old versions of ip(8) do not accept arguments to `ip rule show.` This
patch works around that limitation.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-03-19 15:34:46 +01:00
Jason A. Donenfeld 89cb1a18a4 contrib: add wg-json utility 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-23 15:58:45 +01:00
Jason A. Donenfeld aefa5e8edc wg: fix bash completion spaces 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-23 07:09:49 +01:00
Jason A. Donenfeld bda4b8c60b wg: add wg show [interface] dump 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-23 07:09:49 +01:00
Jason A. Donenfeld d4edc7baa8 wg: give "off" value for fwmark 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-23 07:09:49 +01:00
Jason A. Donenfeld a9bcd0d401 wg-quick: allow config files without trailing newline 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-23 07:09:49 +01:00
Jason A. Donenfeld b20702bfa3 extract-keys: respect compat directives 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-20 21:55:44 +01:00
Jason A. Donenfeld 6448d5557c wg-quick: unquote fwmark for bash 4.3 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-14 11:41:56 +01:00
Jason A. Donenfeld f60ceb76e6 wg-quick: set LC_ALL for consistent regex 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-13 21:55:18 +01:00
Jason A. Donenfeld c8472e2dab socket: enable setting of fwmark 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-13 21:55:18 +01:00
Jason A. Donenfeld ef29165cde socket: general ephemeral ports instead of name-based ports 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-13 21:55:17 +01:00
Jason A. Donenfeld cf2cb85a08 wg-quick: support v6 dual stack 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-13 21:55:17 +01:00
Jason A. Donenfeld 3606898d23 wg: remove key for any empty file 
Rather than just using /dev/null to mean key removal, match on any empty
file, so that this interface is cross platform.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-07 12:21:22 +01:00
Jason A. Donenfeld 666623a82e wg: setconf should remove existing psk 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-02-07 12:21:22 +01:00
Jason A. Donenfeld 4586e14749 wg-quick: recommend using resolvconf in exclusive mode 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-19 00:07:31 +01:00
Jason A. Donenfeld db4f06d118 wg: man: recommend correct port 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-15 22:22:45 +01:00
Jason A. Donenfeld 1d20912898 wg-quick: parse IPv6 endpoints correctly 
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2017-01-15 13:01:06 +01:00