0bdd56ebd6
A few revisions to PFS design.
11 years ago
e94518590d
First stab of PFS design work with PKC security -- may not implement in 1.0.3 but stubbing out.
11 years ago
a8835cd8b3
Some prep work to make room for perfect forward security (PFS). Will not affect existing clients.
11 years ago
e922324bc6
Stop inlining all the Packet armor/dearmor stuff to reduce binary bloat. This stuff is called all over the place.
11 years ago
49f031ccb4
Tons of refactoring, change to desperation algorithm to use max of core or link, porting over core loop code from old Node.cpp to new CAPI version, etc.
11 years ago
a2821e9000
Add code to check external surface against reported surface from other trusted peers, and also rename ExternalSurface to SelfAwareness because lulz.
11 years ago
6eb9289367
Bunch more cleanup, improvements to NAT traversal logic, finished updating Switch.
11 years ago
1f28ce3980
Tons more refactoring: simplify Network, move explicit management of Tap out, redo COM serialization, etc.
11 years ago
93012b0ee5
Re-incorporation: ZeroTier Networks -> ZeroTier, Inc. [Delaware]
11 years ago
89f0c948f8
Physical address change message verb.
11 years ago
64ba596e0b
C++ network config master ready to test.
11 years ago
4e95384ad6
Cleanup, add tristate to config code in Network, and happy new year!
11 years ago
96e9a90e8e
docs
11 years ago
87c599df5c
Back out service message type -- YAGNI violation.
11 years ago
56cfe1d603
Strip out old Service code, add new service message type.
11 years ago
5484cf4309
More cleanup, and fix a bug in Multicaster::gather()
12 years ago
5bb854e504
Fix a nasty bug introduced in packet fragmentation a while back during refactoring, and a few other things related to multicast.
12 years ago
4941c8a1f3
New multicast bug fixes, TRACE improvements, and temporarily disable legacy multicast for debugging purposes.
12 years ago
d5e0f7e3e4
Reorg multicast packet, and a whole bunch of refactoring around the pushing of certificates of membership.
12 years ago
87f1b1b1e3
Bug fix in new multicast frame handler, handling of old "P5" multicast frames in new way.
12 years ago
1109046782
Last steps before test: parse OK(MULTICAST_GATHER) and OK(MULTICAST_FRAME)
12 years ago
dee86e2448
But since we are now using middle 3 bits we can assign sane values for the cipher suite enum.
12 years ago
17da733f97
Gotta support old encrypted flag, move cipher spec to middle 3 bits... due to some shortsighted design early-on. In the future this can die once there are no old peers.
12 years ago
23836d4c11
Change "encrypted" flag to full cipher suite selector. Go ahead and reserve AES256-GCM which might be added in the future.
12 years ago
e53d208ea4
Improve security posture by eliminating non-const data() accessor from Buffer.
12 years ago
b41437780b
Add origin to new MULTICAST_FRAME, move security check for certs into Network to remove redundant code and bug-proneness, more work on IncomingPacket...
12 years ago
2659427864
Multicaster needs to be global, not per-network, and a bunch of other stuff.
12 years ago
8607aa7c3c
Everything in for new multicast except IncomingPacket parsing...
12 years ago
ed0ba49502
A few more revisions to new multicast verbs.
12 years ago
9e186bbd89
.
12 years ago
431476e2e4
Some more multicast algo work...
12 years ago
954f9cbc13
Yet more WIP on mulitcast algo...
12 years ago
d9abd4d9be
Work on defining new direct broadcast multicast algorithm.
12 years ago
9b93141dd0
Upgrade LZ4 to latest version.
12 years ago
aead1050fb
Bridging (GitHub issue #68 ) does indeed work! Just needed to fix a packet size thinko.
12 years ago
6e485833ef
.
12 years ago
d6a4f8d77b
Add flags to EXT_FRAME for better future proofness.
12 years ago
c30f9832b0
Packet decoder work for EXT_FRAME for bridging - GitHub issue #68
12 years ago
fb31f93c52
Protocol messages for bridging. GitHub issue #68
12 years ago
aee742e767
More toward GitHub issue #56
12 years ago
b5c3a92be2
Boring stuff: update dates in copyrights across all files.
12 years ago
8b65b3e6d7
Yank PROBE stuff since it's not used and was a premature addition to the protocol.
12 years ago
07f505971c
Windows build fixes.
12 years ago
10df5dcf70
Fix several things:
...
(1) The changes to path learning in the two previous releases were poorly thought out,
and this version should remedy that by introducing PROBE. This is basically a kind of
ECHO request and is used to authenticate endpoints that are not learned via a valid
request/response pair. Thus we will still passively learn endpoints, but securely.
(2) Turns out there was a security oversight in _doHELLO() that could have permitted...
well... I'm not sure it was exploitable to do anything particularly interesting since
a bad identity would be discarded anyway, but fix it just the same.
12 years ago
612c17240a
Dead code removal, fix for cleanup GitHub issue #28
12 years ago
f5d397e8c8
Pull in-band file transfer stuff. Toyed around with that idea, but it seems that updates for some platforms are big enough and there are enough reliability concerns that just using TCP/HTTP is safer and easier.
12 years ago
9fdec3acfc
More updater work... coming along.
13 years ago
6c63bfce69
File transfer work, add identities for validation of updates.
13 years ago
ae138566a9
Updater code, work in progress...
13 years ago
17778a36ba
Clean up secure random, add packet definitions for update distribution facility.
13 years ago
Adam Ierymenko
Adam Ierymenko