riccardom 82ea56abe2 [client] pqkem: gate controller re-offer to kick the KEM exactly once ...

When the controller receives the responder's (KEM-less) offer it replies with
its own KEM offer instead of answering, so the only transaction that brings the
tunnel up is the one that also carries the PSK. Guard that reply with
ShouldSendBootstrapOffer so it fires only when no exchange is in flight: without
it, every responder offer triggered another offer (an offer-per-offer runaway).
The whole behaviour is isolated to the KEM path (config.PQ != nil); non-PQ
connections answer as before.

2026-08-06 18:04:30 +02:00

..

acl

[client] Skip firewall ruleset rebuild when config is unchanged (#6508)

2026-06-29 19:51:50 +02:00

auth

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

daemonaddr

[client] Authorize daemon IPC callers by their local identity (#6967)

2026-07-29 20:32:26 +02:00

debug

[client] Restrict debug bundle log path and upload destinations (#6975)

2026-07-31 19:12:56 +02:00

dns

[client, android] Pull fresh TUN settings on Android rebuild (#6991)

2026-08-03 18:23:02 +02:00

dnsfwd

[client] Forward non-address DNS record types through route forwarders (#6455)

2026-06-28 18:50:17 +02:00

ebpf

[client] Clear stale UDP checksum in eBPF XDP proxy after port rewrite (#6861)

2026-07-23 14:37:52 +02:00

expose

[client] Add Expose support to embed library (#5695)

2026-03-30 15:53:50 +02:00

ingressgw

[client, management] Add port forwarding (#3275)

2025-03-09 16:06:43 +01:00

ipcauth

[client] Restrict debug bundle log path and upload destinations (#6975)

2026-07-31 19:12:56 +02:00

lazyconn

[client] Reconcile routed allowed IPs when a lazy connection goes idle (#6863)

2026-07-23 18:40:54 +02:00

listener

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

metrics

[management, client] Add management-controlled client metrics push (#5886)

2026-07-01 14:50:25 +02:00

netflow

[client] fix flaky test around event aggregation (#6710)

2026-07-09 18:17:28 +02:00

networkmonitor

[client] Filter scoped/cloned default routes from BSD network monitor RTM_ADD (#6208)

2026-05-25 18:38:21 +02:00

peer

[client] pqkem: gate controller re-offer to kick the KEM exactly once

2026-08-06 18:04:30 +02:00

peerstore

[client] Reinject captured first packet on lazy connection activation (#6572)

2026-06-30 11:22:25 +02:00

portforward

[client] Apply netroute unspecified-destination workaround on android (#6192)

2026-05-29 15:15:22 +02:00

pqkem

[client] pqkem: gate controller re-offer to kick the KEM exactly once

2026-08-06 18:04:30 +02:00

profilemanager

[client] Keep the account email backing the SSO login hint correct (#6986)

2026-08-03 14:21:40 +02:00

relay

[client, relay] Expose relay transport and connection errors in status and metrics (#6342)

2026-06-17 15:41:48 +02:00

rosenpass

[client,management] sync 0.74.4 changes (#6727)

2026-07-11 11:03:55 +02:00

routemanager

[client, android] Pull fresh TUN settings on Android rebuild (#6991)

2026-08-03 18:23:02 +02:00

routeselector

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

sleep

[client] Bump macOS sleep callback timeout to 20s (#6220)

2026-05-20 13:09:22 +02:00

statemanager

[client] Diagnose empty vs corrupt state (#6816)

2026-07-17 15:31:07 +02:00

stdnet

[client] Use stdnet with a context to avoid DNS deadlocks (#4781)

2025-11-13 20:16:45 +01:00

syncstore

[client] Persist sync response via pluggable store (disk on iOS) (#6331)

2026-06-03 14:18:50 +02:00

templates

Update client login success page (#4797)

2025-11-17 15:28:20 +01:00

tunnelnotifier

[client] Serialize iOS tunnel reconfiguration callbacks (#6870)

2026-07-28 16:51:01 +02:00

updater

[client] launch macOS GUI as the logged-in user after install/update (#6962)

2026-08-03 16:28:10 +02:00

winregistry

[client] Clean up match domain reg entries between config changes (#4676)

2025-10-21 18:14:39 +02:00

conn_mgr_test.go

[client] parse NB_LAZY_CONN_INACTIVITY_THRESHOLD as a Go duration (#6947)

2026-07-28 18:12:49 +02:00

conn_mgr.go

[client] parse NB_LAZY_CONN_INACTIVITY_THRESHOLD as a Go duration (#6947)

2026-07-28 18:12:49 +02:00

connect_android_default.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

connect_android_embed.go

[client] Support embed.Client on Android with netstack mode (#5623)

2026-04-01 16:19:34 +02:00

connect_test.go

[client] Support random wireguard port on client (#4085)

2025-07-02 09:01:02 +02:00

connect.go

[client] Android - Serialize Android tunnel reconfiguration callbacks (#6990)

2026-08-03 15:03:15 +02:00

dns_peer_activator_test.go

[client] warm lazy connections from the DNS resolver (#6854)

2026-07-22 18:47:48 +02:00

dns_peer_activator.go

[client] warm lazy connections from the DNS resolver (#6854)

2026-07-22 18:47:48 +02:00

dns_test.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

dns.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

engine_authsession.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

engine_generic.go

[client,signal,management] Add browser client support (#4415)

2025-10-01 20:10:11 +02:00

engine_js.go

[client,signal,management] Add browser client support (#4415)

2025-10-01 20:10:11 +02:00

engine_lazy_exclude_test.go

[client] Fix forwarder peers never excluded from lazy connections (#6674)

2026-07-14 12:12:37 +02:00

engine_privileged_test.go

[client] Categorize privileged tests behind a build tag and run them in Docker (#6425)

2026-06-28 16:15:54 +02:00

engine_session_deadline_test.go

[client] Keep session deadline visible across reconnects (#6847)

2026-07-22 15:22:16 +02:00

engine_sessionwatch_js.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

engine_sessionwatch.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

engine_ssh.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

engine_stdnet_android.go

[client] Use stdnet with a context to avoid DNS deadlocks (#4781)

2025-11-13 20:16:45 +01:00

engine_stdnet.go

[client] Use stdnet with a context to avoid DNS deadlocks (#4781)

2025-11-13 20:16:45 +01:00

engine_test.go

[client] Reinject captured first packet on lazy connection activation (#6572)

2026-06-30 11:22:25 +02:00

engine_tunsettings.go

[client, android] Pull fresh TUN settings on Android rebuild (#6991)

2026-08-03 18:23:02 +02:00

engine.go

Revert "Introduces a forced WG handshake on initial MLKEM bootstrap."

2026-08-06 15:15:43 +02:00

iface_common.go

[client] Reinject captured first packet on lazy connection activation (#6572)

2026-06-30 11:22:25 +02:00

iface_windows.go

Interface code cleaning (#3358)

2025-02-21 10:19:38 +01:00

iface.go

Revert "Revert "[relay] Update GO version and QUIC version (#4736)" (#5055)" (#5071)

2026-01-08 18:58:22 +01:00

message_convert.go

[misc] Move shared components to shared directory (#4286)

2025-08-05 15:22:58 +02:00

mobile_dependency.go

[client] Serialize iOS tunnel reconfiguration callbacks (#6870)

2026-07-28 16:51:01 +02:00

pqkem_adapter_test.go

Revert "Introduces a forced WG handshake on initial MLKEM bootstrap."

2026-08-06 15:15:43 +02:00

pqkem_adapter.go

[client] pqkem: gate controller re-offer to kick the KEM exactly once

2026-08-06 18:04:30 +02:00

pqkem_transport.go

Makes Transport just a UDP socket.

2026-08-04 19:17:44 +02:00

session.go

Send terminal notification on peer session expiry (#1660)

2024-03-08 18:28:13 +01:00

state.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

wg_iface_monitor_linux.go

[client] Replace WG interface monitor polling with netlink subscription on Linux (#5857)

2026-05-04 18:49:39 +02:00

wg_iface_monitor_other.go

[client] Replace WG interface monitor polling with netlink subscription on Linux (#5857)

2026-05-04 18:49:39 +02:00

wg_iface_monitor.go

[client] Replace WG interface monitor polling with netlink subscription on Linux (#5857)

2026-05-04 18:49:39 +02:00