Adam Ierymenko
|
7a94f63058
Back out NaCl since the old one with xmm6 salsa2012 does not support multi-block use and the new one is slower.
|
8 years ago |
Adam Ierymenko
|
e4896b257f
Add thread PTR that gets passed through the entire ZT core call stack and then passed to handler functions resulting from a call.
|
8 years ago |
Adam Ierymenko
|
5e6a4e5f5e
Send revocations automatically on deauth for instant kill, also fix some issues with the RP.
|
8 years ago |
Adam Ierymenko
|
d56f740dc6
Now with less bugs.
|
8 years ago |
Adam Ierymenko
|
127bcb02ff
Save space in expecting-reply-to tracking.
|
8 years ago |
Adam Ierymenko
|
4b11566505
Integrate moon concept into http config bus, and clean up that code quite a bit.
|
8 years ago |
Adam Ierymenko
|
42f28bce52
Cleanup and make moons (federated roots) a little easier to deal with.
|
8 years ago |
Adam Ierymenko
|
9f7919f71f
Add comments to join ("orbit") moons.
|
8 years ago |
Adam Ierymenko
|
0b3b994241
Relay policy can now be computed.
|
8 years ago |
Adam Ierymenko
|
64774d0d4f
Replace piecemeal designation of upstreams with the concept of moons, which is simpler and easier to use and inherits all the cool live update stuff of worlds (now called planets) and global roots.
|
8 years ago |
Adam Ierymenko
|
9a475eeff9
Windows build fix, warning removal.
|
8 years ago |
Adam Ierymenko
|
d5528e4e9a
Wire up VERB_USER_MESSAGE in core.
|
8 years ago |
Adam Ierymenko
|
84732fcb12
Wire through external path lookup. Static paths should now work.
|
8 years ago |
Adam Ierymenko
|
42ba70e79e
Replace long callback arg list with struct, and implement path whitelisting, path blacklisting, and local.conf support for roles.
|
8 years ago |
Adam Ierymenko
|
673c0c811e
Wire through upstream stuff and add setRole().
|
8 years ago |
Adam Ierymenko
|
6e1da35c12
Remove debug.
|
8 years ago |
Adam Ierymenko
|
2ea9f516e1
Rate gate expensive validation of new identities in HELLO.
|
8 years ago |
Adam Ierymenko
|
226123ca08
Refactor controller to permit sending of pushes as well as just replies to config requests.
|
8 years ago |
Adam Ierymenko
|
0b44919ba2
Clusters can send multiple OKs so we must allow this.
|
9 years ago |
Adam Ierymenko
|
9f550292fe
Simply network auth logic and always sent error on auth failure even for unknown networks to prevent forensics.
|
9 years ago |
Adam Ierymenko
|
7e4b6b594b
It now builds.
|
9 years ago |
Adam Ierymenko
|
5b6d27e659
Implement relay policy, and setting multicast limit to 0 now disables multicast on the network as would be expected.
|
9 years ago |
Adam Ierymenko
|
0d4109a9f1
More refactoring to clean up code, and add a gate function to make sure we do not handle OK packets we did not expect. This hardens up a few potential edge cases around security, since such messages might be used to e.g. pollute a cache and DOS under certain conditions.
|
9 years ago |
Adam Ierymenko
|
ccea3d04d6
Push NETWORK_CONFIG_REFRESH on POSTs to /member/... in controller.
|
9 years ago |
Adam Ierymenko
|
98152d974a
More cleanup and removal of DeferredPackets, will do the latter in a more elegant way.
|
9 years ago |
Adam Ierymenko
|
765082fdb6
Trusted path support, and version bump to 1.1.9
|
9 years ago |
Adam Ierymenko
|
4e4fd51117
boring doc stuff
|
9 years ago |
Adam Ierymenko
|
d6f0f1a82a
Use network user ptr in lookup for Ethernet frame handling to eliminate map lookup.
|
9 years ago |
Adam Ierymenko
|
83ef98a9dc
Add a network-associated user ptr in API.
|
9 years ago |
Adam Ierymenko
|
b3e3d4cacc
Instead of using binary packet comparison, add a callback to the API to explicitly check whether paths should be used. Check in with this callback (if present) when learning new paths or sending initial packets.
|
9 years ago |