 Adam Ierymenko
|
010d0a7d56
Docs and a bit of cleanup. In particular ALL makes no sense for revocations because they have IDs. In that case you would just revoke the COM.
|
8 éve |
|
Adam Ierymenko
|
4436824faf
ipauth characteristic now works with ARP
|
8 éve |
|
Adam Ierymenko
|
010dbc8b2b
Merge.
|
8 éve |
|
Adam Ierymenko
|
72653e54f9
Finish wiring up ipauth and macauth to Network filter.
|
8 éve |
 Grant Limberg
|
93ec86a26e
iOS fixes
|
8 éve |
|
Adam Ierymenko
|
10185e92fa
Certificate of ownership -- used to secure against IP address spoofing, especially for IPv4 and regular IPv6.
|
8 éve |
|
Adam Ierymenko
|
cdc289fa9c
Tags work.
|
8 éve |
|
Adam Ierymenko
|
723a9a6e9a
Small additional efficiency improvement.
|
8 éve |
|
Adam Ierymenko
|
59ba7c8bf5
Improve efficiency of pushCredentials() method since it gets called a lot.
|
8 éve |
|
Adam Ierymenko
|
78d548458b
Capabilities basically work but need to refactor a bit for performance reasons.
|
8 éve |
|
Grant Limberg
|
8ffae313fd
add new files & remove old ones from VS project. Now builds & runs on Windows again
|
9 éve |
|
Adam Ierymenko
|
5ba7ca91c0
TRACE build fix.
|
9 éve |
|
Adam Ierymenko
|
eac3667ec1
Bunch more refactoring and work on revocations, etc.
|
9 éve |
|
Adam Ierymenko
|
1f74dd4589
Revocation work in progress, add WATCH which is TEE with implicit rate sync (thanks JG@DCVC!), and clean up some cruft in Network.
|
9 éve |
|
Adam Ierymenko
|
ab9afbc749
(1) Public networks now get COMs even though they do not gate with them since they will need them to push auth for multicast stuff, (2) added a bunch of rate limit circuit breakers for anti-DOS, (3) cleanup.
|
9 éve |
|
Adam Ierymenko
|
16df2c3363
Clean up handling of COMs, network access control, and fix a backward compatiblity issue.
|
9 éve |
|
Adam Ierymenko
|
daf8a66ced
More correct and efficient to initialize member relationship push stuff lazily when member is learned.
|
9 éve |
|
Adam Ierymenko
|
1908aa55f5
Refactor MULTICAST_LIKE pushing to eliminate redundant and unnecessary pushes and simplify code.
|
9 éve |
|
Adam Ierymenko
|
a3c7627acf
Push more than one packet for credentials if we happen to have a whole lot. Should not happen often but might if a member has tons of tags.
|
9 éve |
|
Adam Ierymenko
|
d637988ccf
Fix chicken or egg problem in tags, and better filter debug instrumentation.
|
9 éve |
|
Adam Ierymenko
|
e52c2c41ec
Add a circuit breaker to prevent too many credentials from being stored per member.
|
9 éve |
|
Adam Ierymenko
|
63e8ad4cc3
TRACE stuff.
|
9 éve |
|
Adam Ierymenko
|
2cdda38dc4
It basically works... at least on current controllers.
|
9 éve |
|
Adam Ierymenko
|
9a3c652a51
Get rid of expiration in Capability and Tag and move this to NetworkConfig so it can be set network-wide and reset if needed. Also add NetworkConfig field for this and centralize checking of credential time validity.
|
9 éve |
|
Adam Ierymenko
|
e1310a764a
More cleanup and removal of cruft due to obsolete network-specific relays (will be replaced with federation stuff).
|
9 éve |
|
Adam Ierymenko
|
00fd9c3a15
It builds... almost ready to test some rules engine stuff.
|
9 éve |
|
Adam Ierymenko
|
8007ca56aa
Refactor and tie-up of capabilities and tags and packet evaluation points. Some optimization is possible here but it is minor and we will make it work first.
|
9 éve |
|
Adam Ierymenko
|
4d7f625aa1
.
|
9 éve |
|
Adam Ierymenko
|
e2f783ebbd
.
|
9 éve |
|
Adam Ierymenko
|
56febbf2ba
.
|
9 éve |
