Adam Ierymenko
ee0a194b25
Several more SSO/OIDC related fixes, and bump version to 1.8.9.
4 years ago
Adam Ierymenko
ef08346a74
Fix a possible excessive memory use issue in controller and clean up a bunch of COM handling and other code in the normal node.
4 years ago
Joseph Henry
f9c84c8c52
Remove stray debug trace
4 years ago
Grant Limberg
d719137565
temp workaround for oidc auth dropping issue
...
Add a method to "kick" the refresh thread and re-post the tokens in the case where the thread is somehow still running & controller pushes out an AUTH_REQUIRED. This situation happens in a corner case still under investigation where the controller pushes out many copies of the network config repeatedly
4 years ago
Grant Limberg
663a09b38d
oidc stuff coming across the wire properly and generating a working login URL
4 years ago
Grant Limberg
eaccce743f
moar plumbing progress
4 years ago
Grant Limberg
91e9b736dd
make service objs dependent on zeroidc
4 years ago
Grant Limberg
fa21fdc1cc
rename stuff for clarity
...
authenticationURL will still be used by the client for v1 and v2 of sso
4 years ago
Grant Limberg
8d39c9a861
plumbing full flow from controller -> client network
4 years ago
Adam Ierymenko
eabe091038
Backport only the COM mitigation instead of everything from 1.8
5 years ago
Adam Ierymenko
75a45eeb27
Revert "Backport guts of 1.8 to 1.6 tree so we can point release without waiting for UI quirks to be fixed."
...
This reverts commit 48ce7632fa .
5 years ago
Adam Ierymenko
48ce7632fa
Backport guts of 1.8 to 1.6 tree so we can point release without waiting for UI quirks to be fixed.
5 years ago
Adam Ierymenko
134d33c218
Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring.
5 years ago
Adam Ierymenko
7c3166e9be
Add a bit of hardening in the network certificate of membership by incorporating a full hash of the identity to which it is issued. This means the recipient need not depend entirely on the root verifying identities properly to make sure impersonation is not occurring.
5 years ago
Grant Limberg
364ad87e2b
add ssoEnabled flag to network config
5 years ago
Adam Ierymenko
810e2a761f
Fix authentication URL...
5 years ago
Adam Ierymenko
6ce71c1bc3
Fix reporting of status.
5 years ago
Adam Ierymenko
b270d527f4
Basic plumbing for authentication requirement and piping through of URL information.
5 years ago
Adam Ierymenko
dc806dd718
Try pipelining tap reads on Linux for a little more speed.
5 years ago
Adam Ierymenko
06730c7d1d
BSL date bump
6 years ago
Grant Limberg
c0c215c83c
single dns config per network
6 years ago
Grant Limberg
88a3c685fb
latest
6 years ago
Grant Limberg
d098a99d09
fix memory init issue
...
and another place where dns data needs to be copied
6 years ago
Adam Ierymenko
52a166a71f
Relicense: GPLv3 -> ZeroTier BSL 1.1
7 years ago
Adam Ierymenko
3db0197865
Add try/catch in LFDB and add introspection into multicast subscriptions in client network status API
7 years ago
Adam Ierymenko
e2900f4f3c
Fix valgrind warning... not sure if it is an actual issue.
7 years ago
Adam Ierymenko
aa831dd843
More stack->heap...
7 years ago
Adam Ierymenko
2966eac64f
Get rid of ZT_FAST_MEMCPY because this is not really needed.
7 years ago
Adam Ierymenko
63ec19674c
.
7 years ago
Adam Ierymenko
e03102dbcb
Clean out some unnecessarily pedantic auth stuff in favor of a simpler way of gating multicast gathers.
7 years ago
Joseph Henry
0e597191b8
Updated licenses for 2019
7 years ago
Joseph Henry
65b0030342
Added basic QoS rule handling
8 years ago
Joseph Henry
28cb40529d
Rough draft of fq-codel implementation
8 years ago
Adam Ierymenko
494cf4049e
Add specification of anchor and multicast hub address (optional) to new multicast and IPv4 enabled ad-hoc network ID format.
8 years ago
Adam Ierymenko
c908b9f67a
Add anchor and multicast hub address field to new multicast enabled ad-hoc address format.
8 years ago
Adam Ierymenko
78d9cee416
Other fixes to IPv4 ad-hoc networks.
8 years ago
Adam Ierymenko
bbdb2aa672
Some work on IPv4 enabled ad-hoc networks.
8 years ago
Adam Ierymenko
f7019d9e80
Tie up the rest of hub and spoke designated replicator multicast mode.
8 years ago
Adam Ierymenko
f03fd57997
Clean up some multicast code.
8 years ago
Adam Ierymenko
384e5b66de
More work on GitHub issue #666
8 years ago
Adam Ierymenko
65c07afe05
Copyright updates for 2018.
8 years ago
Adam Ierymenko
0608704626
Some micro-optimizations, including a memcpy that is faster than Linux for most distro/compiler versions.
8 years ago
Adam Ierymenko
395d8b3139
Full and clearer implementation of GitHub issue #588
9 years ago
Grant Limberg
b1d60df44c
timestamps changed from uint64_t to int64_t
...
There were cases in the code where time calculations and comparisons were overflowing and causing connection instability. This will keep time calculations within expected ranges.
9 years ago
Adam Ierymenko
f8014413a3
Add UDP MTU configurability.
9 years ago
Adam Ierymenko
495c5ce81d
Bunch of remote tracing work.
9 years ago
Adam Ierymenko
dab0fb9e05
Remote trace: plumbing, replace old TRACE with calls to Trace object.
9 years ago
Adam Ierymenko
d2415dee00
Cleanup.
9 years ago
Adam Ierymenko
2f20258807
.
9 years ago
Adam Ierymenko
baa10c2995
.
9 years ago