Commit Graph

  • 906fdf4bb5 Merge remote-tracking branch 'origin/main' into android/gui-integration android/gui-integration Zoltán Papp 2026-08-04 21:53:44 +02:00
  • d5adfc799f handle policy with no rules to avoid index panic revert/component-types pascal 2026-08-04 20:57:57 +02:00
  • 60fe56e442 fix assert equal ordering pascal 2026-08-04 20:56:16 +02:00
  • 327fa4c0d6 fix group clone pascal 2026-08-04 20:52:16 +02:00
  • ed015a7972 skip resource from proto failure pascal 2026-08-04 20:46:10 +02:00
  • b43708e31b silently skip resource to proto failure pascal 2026-08-04 20:42:43 +02:00
  • ce55b8406b handle not found peer on posture vali pascal 2026-08-04 20:34:30 +02:00
  • 0456b64ea1 silent skip on non existing groups references pascal 2026-08-04 20:28:06 +02:00
  • 6526fc2bec [management] Prevent deleting groups referenced by reverse proxy services (#7062) main Maycon Santos 2026-08-05 03:24:20 +09:00
  • 942ee81ec0 add benchmark pascal 2026-08-04 20:19:17 +02:00
  • fe530cf25a Skip default port send in signal proto feat-post_quantum_ml_kem riccardom 2026-08-04 18:33:13 +02:00
  • 915266ffff Allow non strict mode riccardom 2026-08-04 18:04:10 +02:00
  • 6d0f6c4bb8 Adds PQ connection tests riccardom 2026-08-04 16:24:36 +02:00
  • 45865ec80f Remove obvious comments; leave only the why of things riccardom 2026-08-04 15:29:15 +02:00
  • 171d22e4e8 Be more explicit on names that is a fake key to ensure we don't communicate with others in strict mode riccardom 2026-08-04 15:30:15 +02:00
  • 975479d4b8 Adds test to validate compromised keys are not accepted riccardom 2026-08-04 15:16:00 +02:00
  • 4d812a1353 Prioritize Kem over RP riccardom 2026-08-04 15:14:42 +02:00
  • 47e22ad6b8 pqkem: concurrency tests (recovery + race) riccardom 2026-07-31 13:11:06 +02:00
  • 52a9843f95 pqkem: recover from persistent rekey failure by re-bootstrapping over signal riccardom 2026-07-31 10:47:07 +02:00
  • cb73d7e959 Discriminate initial from rekey failure riccardom 2026-07-30 16:41:05 +02:00
  • 75c7a3bdca pqkem: strict (fail-closed) mode + wire status Quantum resistance riccardom 2026-07-30 09:29:12 +02:00
  • 97d99c9187 pqkem: rotate PSK in kernel mode instead of skipping riccardom 2026-07-29 10:18:42 +02:00
  • 3e0f1ec083 pqkem: derive PSK with HKDF-SHA256 riccardom 2026-07-29 08:55:03 +02:00
  • 3877c84266 Don't rotate PQ keys if data path is idle for ~90s (less than a WG handhshake time riccardom 2026-07-31 10:27:32 +02:00
  • 44231f576e Adds log tracepoints riccardom 2026-07-28 22:43:07 +02:00
  • d2aeb2cc1f Fixes second answer dropped (the one carrying the PQ KEM data) riccardom 2026-07-28 12:30:49 +02:00
  • f8d58f23e5 Renames SetRemotePort to SetRemoteAddr riccardom 2026-07-27 16:36:01 +02:00
  • 341fb04d82 pqkem: clock data-path PSK rotation from WireGuard handshakes riccardom 2026-07-27 16:32:33 +02:00
  • 65454f23dc pqkem: register data-path endpoint from signalling riccardom 2026-07-27 16:18:35 +02:00
  • c937df5aea pqkem: apply derived PSK at WG peer-config time (pull) + keep push for rekey riccardom 2026-07-26 14:04:51 +02:00
  • 135d3f5e7f pqkem: carry KEM offer/answer over the signalling exchange riccardom 2026-07-26 13:15:51 +02:00
  • d959adfb25 pqkem: dedicated slog logger via NB_PQ_MLKEM_LOG_LEVEL riccardom 2026-07-26 06:57:40 +02:00
  • 4874f5ae51 Homogeneous logs prefix riccardom 2026-07-25 13:33:11 +02:00
  • 622be61b11 Bit of renaming riccardom 2026-07-25 13:10:45 +02:00
  • 1b1ddebd4c Typo riccardom 2026-07-25 12:12:39 +02:00
  • 56ec125afc Race fix riccardom 2026-07-25 12:12:32 +02:00
  • 5f81c1e5b8 Makes Transport just a UDP socket. riccardom 2026-07-25 12:06:43 +02:00
  • d91b7f53a0 Adds transport riccardom 2026-07-25 11:30:39 +02:00
  • 610f87c4cb Communicate the port over the signal exchange riccardom 2026-07-24 18:29:06 +02:00
  • 69d986276a Ensure iface is up and with overlay ip assigned to get a valid UDP port riccardom 2026-07-24 18:28:43 +02:00
  • a26aeeee47 Adds real callback setter for PSK on ready riccardom 2026-07-24 18:18:15 +02:00
  • bdd1683fed Initializes PQ ML-KEM manager riccardom 2026-07-24 18:09:20 +02:00
  • f669147a76 Adds no-op Transports and callbacks riccardom 2026-07-24 18:08:52 +02:00
  • 8dcbd4ed8e Added enabled env var riccardom 2026-07-24 18:06:20 +02:00
  • 273101bfcb Adds MLKEM Payload placeholder to client internals riccardom 2026-07-24 17:38:12 +02:00
  • 2187760567 Invert order of keys as per draft riccardom 2026-07-24 17:30:13 +02:00
  • 09315d754a Protocol update riccardom 2026-07-24 15:50:59 +02:00
  • 608234e947 Removes confirm. Uses next offer to deliver confirmation/ack of previous round riccardom 2026-07-23 17:37:39 +02:00
  • 475b3e9790 Leave signal offer/answer as a pull/push operation not as an actual transport riccardom 2026-07-23 16:52:26 +02:00
  • baea17efb6 Assume two transports: initial "signal" (control plane) one (no data path established yet) + data path one riccardom 2026-07-23 15:14:19 +02:00
  • 6cef0d8bee Epurate wg refs riccardom 2026-07-23 11:03:40 +02:00
  • 37ce7b4f6f Collapse Driver and Manager in one. riccardom 2026-07-23 10:47:23 +02:00
  • a20ad0158e [squash] isInitial and answered can be inferred without state variables riccardom 2026-07-22 09:46:34 +02:00
  • cdcf58a14c Manages convergence riccardom 2026-07-22 09:35:05 +02:00
  • c3667140ea Models reattempts riccardom 2026-07-21 17:29:28 +02:00
  • ca356353b1 Reuse answer, don't calculate again riccardom 2026-07-21 17:25:12 +02:00
  • 3f15ec14c1 Adds driver to glue together manager and outside world riccardom 2026-07-21 13:09:21 +02:00
  • 4ad3517869 Defines event callbacks riccardom 2026-07-21 13:09:15 +02:00
  • f67332f062 Admits possible errors on Encode riccardom 2026-07-21 13:01:45 +02:00
  • 87c610b44b Bench key material boilerplate time/allocs riccardom 2026-07-21 12:19:05 +02:00
  • a9946d7ffe Pure mechanics of manager riccardom 2026-07-21 12:18:01 +02:00
  • 942e3a1924 Messages definition riccardom 2026-07-21 09:52:46 +02:00
  • fd08e8aaf7 ML-KEM encapsulate/decapsulate module riccardom 2026-07-21 09:52:35 +02:00
  • 33a0e1bc2b adding integration tests Dmitri Dolguikh 2026-08-04 18:58:29 +02:00
  • d8fc0fdbe4 Require a minimum length before classifying a packet as WireGuard ice-stun-wg-demux Viktor Liu 2026-08-04 18:05:15 +02:00
  • 2afa69b622 [management] prevent dangling group refs in agent-network ACLs. (#7060) Misha Bragin 2026-08-04 18:04:22 +02:00
  • 2a61eac047 [client] Fix Linux tray right-click opening the main window (#7039) Zoltan Papp 2026-08-04 15:36:04 +00:00
  • e950a9487f Clear the size of a packet consumed by the STUN handler Viktor Liu 2026-08-04 15:50:05 +02:00
  • dbfdd04c7b adding network-routers integration query test Dmitri Dolguikh 2026-08-04 16:43:17 +02:00
  • f2d13b884a [client] Fix session expired relogin (#7055) Zoltan Papp 2026-08-04 14:02:31 +00:00
  • 564595d283 [client, android] Fix profile account path test on Windows (#7057) Zoltan Papp 2026-08-04 14:02:09 +00:00
  • 4d010f60ce fix another import Dmitri Dolguikh 2026-08-04 15:40:28 +02:00
  • 85776bfbaf Merge branch 'main' into dependabot/npm_and_yarn/proxy/web/npm_and_yarn-b39864987c dependabot/npm_and_yarn/proxy/web/npm_and_yarn-b39864987c Eduard Gert 2026-08-04 15:29:37 +02:00
  • 7099f5907b Do not misroute WireGuard packets to the STUN handler Viktor Liu 2026-08-04 14:32:15 +02:00
  • 78c1c2fc32 [client] Probe the daemon login with IsLoginRequired (#7052) Zoltan Papp 2026-08-04 12:27:47 +00:00
  • 3272058e56 fix extra setting manager package Dmitri Dolguikh 2026-08-04 13:34:25 +02:00
  • 70c3feb05b Merge remote-tracking branch 'origin/revert/component-types' into revert/component-types Dmitri Dolguikh 2026-08-04 13:04:51 +02:00
  • a0fe80cd99 wire up validated peers Dmitri Dolguikh 2026-08-04 12:52:09 +02:00
  • e193e59c6a [client] Route agent-network through the daemon and shape env per provider agent-network-setup-poc mlsmaycon 2026-08-04 09:10:01 +00:00
  • ba3db38932 [client] Hint at sudo when the profile config is not readable mlsmaycon 2026-08-04 08:48:48 +00:00
  • 5660ed1266 build(deps): bump the aws-sdk group across 1 directory with 4 updates dependabot/go_modules/aws-sdk-8f849ebaed dependabot[bot] 2026-08-04 02:49:08 +00:00
  • c1d3d77179 build(deps): bump the actions group across 1 directory with 14 updates dependabot/github_actions/actions-a940c7c866 dependabot[bot] 2026-08-04 02:47:38 +00:00
  • 72c35ce23d build(deps): bump the otel group across 1 directory with 5 updates dependabot/go_modules/otel-e34c790afd dependabot[bot] 2026-08-04 02:44:06 +00:00
  • 6ccb96eb47 build(deps): bump the testcontainers group across 1 directory with 3 updates dependabot/go_modules/testcontainers-de325c0dd6 dependabot[bot] 2026-08-04 02:44:03 +00:00
  • 08e2adba11 build(deps): bump golang.zx2c4.com/wireguard/windows dependabot/go_modules/wireguard-dbd6b95108 dependabot[bot] 2026-08-04 02:43:56 +00:00
  • fbc18dc630 build(deps): bump the pion group across 1 directory with 2 updates dependabot/go_modules/pion-5f703e1eca dependabot[bot] 2026-08-04 02:43:54 +00:00
  • 697dfaed8c build(deps): bump the gorm group across 1 directory with 4 updates dependabot/go_modules/gorm-2271c8195b dependabot[bot] 2026-08-04 02:43:51 +00:00
  • 9169a36658 [management, client] Make the agent-network setup RPC provable at runtime mlsmaycon 2026-08-04 02:06:48 +00:00
  • 792a6cd524 Check if login failed fix-login-needed-check mlsmaycon 2026-08-04 03:31:27 +02:00
  • 74b2f5cf4f [client] Add netbird agent-network ls and env commands mlsmaycon 2026-08-04 00:32:03 +00:00
  • 5d4c7f32f4 [management] Add peer-facing Agent Network setup RPC mlsmaycon 2026-08-04 00:31:53 +00:00
  • bc7a15ab71 [management] Align agent-network API contracts for API clients (#7026) Maycon Santos 2026-08-04 08:59:09 +09:00
  • 6fadf8f24a fix nmdata store expanding router peer groups alongside static peer pascal 2026-08-03 23:58:47 +02:00
  • ef0032685b fix nmdata store shipping zones for disabled/public services pascal 2026-08-03 23:54:22 +02:00
  • e4a712970a build(deps): bump the npm_and_yarn group across 2 directories with 4 updates dependabot[bot] 2026-08-03 21:24:09 +00:00
  • 8aa5a8cc60 build(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 dependabot/go_modules/google.golang.org/grpc-1.82.1 dependabot[bot] 2026-08-03 21:22:36 +00:00
  • 530021aec6 [client] Update wails to v3.0.0-beta.3 (#7038) Zoltan Papp 2026-08-03 21:19:59 +00:00
  • 5ed38569f7 fix PrivateServiceCandidates nil assumption pascal 2026-08-03 23:19:55 +02:00
  • d4e1c8978e add all group to user group lookup pascal 2026-08-03 23:08:43 +02:00
  • 1bedb4e59d [client, android] Reuse the profile's account for Android SSO logins (#6988) Zoltan Papp 2026-08-03 20:50:57 +00:00