Github/netbird
1
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-08-31 02:51:39 -07:00
Code Issues Packages Projects Releases Wiki Activity

Commit Graph

  • 56b3c15584 Be more explicit on names that is a fake key to ensure we don't communicate with others in strict mode riccardom 2026-08-04 15:30:15 +02:00
  • 9f769a53f2 Adds test to validate compromised keys are not accepted riccardom 2026-08-04 15:16:00 +02:00
  • a06cbd42d6 Prioritize Kem over RP riccardom 2026-08-04 15:14:42 +02:00
  • 80bbdf13cb pqkem: concurrency tests (recovery + race) riccardom 2026-07-31 13:11:06 +02:00
  • 57d3e07f18 pqkem: recover from persistent rekey failure by re-bootstrapping over signal riccardom 2026-07-31 10:47:07 +02:00
  • 85f1a6f69f Discriminate initial from rekey failure riccardom 2026-07-30 16:41:05 +02:00
  • 9908106f4b pqkem: strict (fail-closed) mode + wire status Quantum resistance riccardom 2026-07-30 09:29:12 +02:00
  • 3676b9de20 pqkem: rotate PSK in kernel mode instead of skipping riccardom 2026-07-29 10:18:42 +02:00
  • 156f660333 pqkem: derive PSK with HKDF-SHA256 riccardom 2026-07-29 08:55:03 +02:00
  • edc17965d0 Don't rotate PQ keys if data path is idle for ~90s (less than a WG handhshake time riccardom 2026-07-31 10:27:32 +02:00
  • 57f7378ade Adds log tracepoints riccardom 2026-07-28 22:43:07 +02:00
  • 22b40ad2eb Renames SetRemotePort to SetRemoteAddr riccardom 2026-07-27 16:36:01 +02:00
  • ec2d6c9004 pqkem: clock data-path PSK rotation from WireGuard handshakes riccardom 2026-07-27 16:32:33 +02:00
  • c49666c859 pqkem: register data-path endpoint from signalling riccardom 2026-07-27 16:18:35 +02:00
  • 5fabb87b02 pqkem: apply derived PSK at WG peer-config time (pull) + keep push for rekey riccardom 2026-07-26 14:04:51 +02:00
  • 2400eaa246 pqkem: carry KEM offer/answer over the signalling exchange riccardom 2026-07-26 13:15:51 +02:00
  • 850d35b896 pqkem: dedicated slog logger via NB_PQ_MLKEM_LOG_LEVEL riccardom 2026-07-26 06:57:40 +02:00
  • b861d57856 Homogeneous logs prefix riccardom 2026-07-25 13:33:11 +02:00
  • d255b53279 Bit of renaming riccardom 2026-07-25 13:10:45 +02:00
  • 3e188eaf13 Typo riccardom 2026-07-25 12:12:39 +02:00
  • 8f9e18aa31 Race fix riccardom 2026-07-25 12:12:32 +02:00
  • 11f8409354 Makes Transport just a UDP socket. riccardom 2026-07-25 12:06:43 +02:00
  • bf7ed45ca9 Adds transport riccardom 2026-07-25 11:30:39 +02:00
  • e1f91d02ee Communicate the port over the signal exchange riccardom 2026-07-24 18:29:06 +02:00
  • 3bdf2db52f Ensure iface is up and with overlay ip assigned to get a valid UDP port riccardom 2026-07-24 18:28:43 +02:00
  • 07c5ac6bac Adds real callback setter for PSK on ready riccardom 2026-07-24 18:18:15 +02:00
  • dc9ea94c61 Initializes PQ ML-KEM manager riccardom 2026-07-24 18:09:20 +02:00
  • 87a3f1e056 Adds no-op Transports and callbacks riccardom 2026-07-24 18:08:52 +02:00
  • 3da87de12a Added enabled env var riccardom 2026-07-24 18:06:20 +02:00
  • 87fbf0ac26 Adds MLKEM Payload placeholder to client internals riccardom 2026-07-24 17:38:12 +02:00
  • 1cab588bc0 Invert order of keys as per draft riccardom 2026-07-24 17:30:13 +02:00
  • d29faa7f46 Protocol update riccardom 2026-07-24 15:50:59 +02:00
  • a8350c77f8 Removes confirm. Uses next offer to deliver confirmation/ack of previous round riccardom 2026-07-23 17:37:39 +02:00
  • 6f6fdfff4d Leave signal offer/answer as a pull/push operation not as an actual transport riccardom 2026-07-23 16:52:26 +02:00
  • 65948ca76d Assume two transports: initial "signal" (control plane) one (no data path established yet) + data path one riccardom 2026-07-23 15:14:19 +02:00
  • da6a56a7ef Epurate wg refs riccardom 2026-07-23 11:03:40 +02:00
  • 4582c5b4fc Collapse Driver and Manager in one. riccardom 2026-07-23 10:47:23 +02:00
  • 5eea1b1c8e [squash] isInitial and answered can be inferred without state variables riccardom 2026-07-22 09:46:34 +02:00
  • b92f7c54d0 Manages convergence riccardom 2026-07-22 09:35:05 +02:00
  • 0cf67417f9 Models reattempts riccardom 2026-07-21 17:29:28 +02:00
  • f66b94be07 Reuse answer, don't calculate again riccardom 2026-07-21 17:25:12 +02:00
  • 7cb08f7282 Adds driver to glue together manager and outside world riccardom 2026-07-21 13:09:21 +02:00
  • 33734635bf Defines event callbacks riccardom 2026-07-21 13:09:15 +02:00
  • 1d7acada1c Admits possible errors on Encode riccardom 2026-07-21 13:01:45 +02:00
  • bfcc8aaa94 Bench key material boilerplate time/allocs riccardom 2026-07-21 12:19:05 +02:00
  • 59a23d706a Pure mechanics of manager riccardom 2026-07-21 12:18:01 +02:00
  • 045678c184 Messages definition riccardom 2026-07-21 09:52:46 +02:00
  • cb9f8f75e6 ML-KEM encapsulate/decapsulate module riccardom 2026-07-21 09:52:35 +02:00
  • fc15704fbc Self-scope the provider list for callers without the read grant mlsmaycon 2026-08-27 10:13:17 +00:00
  • 94be25490d [client] Cancel the wait displaced by an OAuth flow replacement Zoltán Papp 2026-08-27 12:09:57 +02:00
  • 9769893165 Merge branch 'main' into fix/pkce-flow-session-extend Zoltán Papp 2026-08-27 11:57:56 +02:00
  • 16cdd357b2 Address review feedback on remote-jobs opt-in + MDM mlsmaycon 2026-08-27 09:54:33 +00:00
  • 41cac0a550 [client] Cancel the caller context in the SSO login tests Zoltán Papp 2026-08-27 11:34:44 +02:00
  • 6fb1ad7d5a [client] Consume the forced account prompt after the retry Zoltán Papp 2026-08-27 11:33:55 +02:00
  • 3cd20882fa [client] Keep the forced account prompt from being lost to flow reuse Zoltán Papp 2026-08-27 11:33:22 +02:00
  • 211fd497cd [client] Judge the SSO account against the flow that produced the token Zoltán Papp 2026-08-27 11:32:08 +02:00
  • 5cbe663bac [client] Drop the pending session extend on a profile switch Zoltán Papp 2026-08-27 11:30:53 +02:00
  • ac9cf65616 Bump github.com/crowdsecurity/crowdsec from 1.7.7 to 1.7.8 dependabot/go_modules/github.com/crowdsecurity/crowdsec-1.7.8 dependabot[bot] 2026-08-27 09:30:48 +00:00
  • e06c17cf59 [management] network map from nmap data type (#6919) Pascal Fischer 2026-08-27 11:28:05 +02:00
  • 3615c01fe3 fix(client): keep the run's exit signal readable after supervisor Stop fix/daemon-connection-lifecycle Zoltán Papp 2026-08-27 11:27:25 +02:00
  • 527d2f8559 [client] Read the profile from the daemon when the local mirror is not authoritative Zoltán Papp 2026-08-27 11:15:12 +02:00
  • 8a4aafe88a Merge branch 'main' into file-share Zoltán Papp 2026-08-27 11:13:19 +02:00
  • 4dde6f29cb Merge branch 'main' into fix/quickstart-subnet-and-domain-alias fix/quickstart-subnet-and-domain-alias Brandon Hopkins 2026-08-27 11:07:36 +02:00
  • 97fdb70afd [client] agentproxy PoC: in-process DNS notes + startup/request logging claude/netbird-agent-proxy-poc-iudvwm Claude 2026-08-27 09:05:49 +00:00
  • 564df34112 [management] Scope the omitted-key sentence to updates that trigger a check mlsmaycon 2026-08-27 09:03:25 +00:00
  • 7ca9be2f2f [management] Refuse a blank api_key on a provider update instead of ignoring it mlsmaycon 2026-08-27 08:48:13 +00:00
  • e85e18e5b9 [management] Document the fourth trigger for the update credential check mlsmaycon 2026-08-27 08:46:24 +00:00
  • 8282012235 [client] Match accounts only on the email claim of the ID token Zoltán Papp 2026-08-27 10:41:47 +02:00
  • 567cd28601 Match base's protoc version header in generated management.pb.go mlsmaycon 2026-08-27 08:40:53 +00:00
  • b7c2a16f60 Match main's protoc version header in generated management.pb.go mlsmaycon 2026-08-27 08:39:45 +00:00
  • a285f64d89 [client] Add rootless agent-network local proxy PoC Claude 2026-08-27 08:36:00 +00:00
  • 3145ad5b7e Merge debug-bundle-anonymize-level-upload-url into feat/remote-jobs-optin-mdm mlsmaycon 2026-08-27 08:35:38 +00:00
  • 8a716f1294 [management] Check a record when TLS verification is switched back on mlsmaycon 2026-08-27 08:33:57 +00:00
  • 2487cfcf24 [client] Address review comments on PKCE session extend flow Zoltán Papp 2026-08-27 10:32:57 +02:00
  • a171aa961a Merge origin/main into debug-bundle-anonymize-level-upload-url mlsmaycon 2026-08-27 08:15:12 +00:00
  • 5720c33be9 [management] Fix what a second review found in the credential check mlsmaycon 2026-08-27 08:15:06 +00:00
  • f263b540b5 Merge remote-tracking branch 'origin/agent-network-roles' into agent-network-roles mlsmaycon 2026-08-27 08:07:51 +00:00
  • c995d89830 Redact provider connection config for read-only viewers and canonicalize Bedrock ids in setup mlsmaycon 2026-08-27 08:07:20 +00:00
  • ed28b80817 Merge branch 'main' into agent-network-roles Maycon Santos 2026-08-27 10:00:54 +02:00
  • c03f7c72f3 Merge remote-tracking branch 'origin/modify-peer-reactivate' into modify-peer-reactivate Viktor Liu 2026-08-26 20:11:24 +02:00
  • b1ec03459f Register a re-added active peer as active instead of activating it after the add Viktor Liu 2026-08-26 20:11:00 +02:00
  • 473392a935 [client] Tolerate a still-locked updater binary when cleaning up after an update (#7286) Viktor Liu 2026-08-27 03:03:56 +09:00
  • 0bd1147ff0 [client] Keep NetBird traffic out of third-party fwmark rules (#7314) Viktor Liu 2026-08-27 03:03:40 +09:00
  • 7f84d90763 Merge branch 'main' into proxy-oidc-group-enforcement proxy-oidc-group-enforcement Viktor Liu 2026-08-27 01:30:24 +09:00
  • 540c551f19 [management] Make the live rotation test prove what it claims mlsmaycon 2026-08-26 15:33:16 +00:00
  • b23969db59 Merge branch 'main' into agent-network/provider-credential-check Maycon Santos 2026-08-26 17:26:13 +02:00
  • afffc948eb [management] Regenerate the API types after the discovery request change mlsmaycon 2026-08-26 14:34:18 +00:00
  • 11faa925ee [management] Check a vendor change, and bound the check by one deadline mlsmaycon 2026-08-26 14:23:58 +00:00
  • 31c183c591 Merge branch 'main' into fix/pkce-flow-session-extend Zoltán Papp 2026-08-26 16:00:34 +02:00
  • bd696c2128 Bump the actions group across 1 directory with 13 updates dependabot/github_actions/actions-eb6602ebd8 dependabot[bot] 2026-08-26 13:40:27 +00:00
  • f221347c7a [infrastructure] Trigger the dashboard wasm client bump on release tags (#7277) Viktor Liu 2026-08-26 22:34:10 +09:00
  • 5df35e3e27 fix(client): track which connection run is current in the daemon Zoltán Papp 2026-08-26 15:28:40 +02:00
  • 0a9ce7f797 [client] fix a flake in TestResolver_ConcurrentStaleHitsCollapseRefresh test (#7326) dmitri-netbird 2026-08-26 12:51:19 +02:00
  • 7e8b4e1417 [client, proxy] Remove lazy connection exclusions and run Rosenpass on the embedded proxy (#6763) Viktor Liu 2026-08-26 19:43:48 +09:00
  • 2621aaa619 [management, client] add protobuf breaking changes check (#7305) dmitri-netbird 2026-08-26 11:48:05 +02:00
  • ec4b99bdc5 Merge branch 'main' into mdm_integration mdm_integration Zoltán Papp 2026-08-26 10:00:11 +02:00
  • ed7d4de999 [client, ios] Migrate switft profile manager to go (#6528) Zoltan Papp 2026-08-26 09:42:50 +02:00
  • c281b15cfa [client] Move MDM enforcement logic into a shared Go layer (#7319) Zoltan Papp 2026-08-26 09:42:13 +02:00
  • 51095cb986 [client, management] Support per-peer lazy connection state and default proxy peers to lazy (#6762) Viktor Liu 2026-08-26 16:33:51 +09:00
  • b64db1d587 [management] Check the upstream a Bedrock listing never touches mlsmaycon 2026-08-26 07:14:37 +00:00