9a59ac3094
meta: release v1.5.1
2021-11-11 18:42:21 +09:00
e2473951b7
meta: update dependencies
2021-11-11 18:41:44 +09:00
991c6435c1
client: wait after updating interface before attempting NAT traversal
...
otherwise, the server-reported IP itself won't have time to check
if a handshake succeeds or not.
2021-11-11 18:34:31 +09:00
b0d0ee8565
fix tests
2021-11-06 18:54:52 +09:00
d7cf24c63c
server: validate hostname in 'new'
...
fixes #164
2021-11-05 12:36:35 +09:00
17dd26921f
meta: update dependencies
2021-11-05 12:22:35 +09:00
c09d828414
shared: follow-up to bfa5d5e, double- to single-quote in opt rustdocs
2021-09-21 12:50:21 +09:00
bfa5d5ee5d
client: change rustdoc double-quotes to single for zsh completions.
...
clap (used by StructOpt) doesn't escape double-quotes inside the
rustdocs that is uses to generate completion helptext. Rather than wait
on them, it's simpler to just avoid double-quotes for now at least.
Closes #156
2021-09-21 12:46:56 +09:00
cac46dbf30
docker-tests: simplify build step
2021-09-18 16:15:29 +09:00
072ac4bf96
client: fix minor typo ("exhuasted") ( #155 )
2021-09-18 13:16:27 +09:00
1b983d636d
meta: release v1.5.0
2021-09-17 14:18:09 +09:00
9b1315b079
meta: release v1.5.0-beta.5
2021-09-16 02:00:03 +09:00
b7b50d0156
release.sh: make sure wireguard-control-sys version is synced
2021-09-16 01:59:52 +09:00
72353ed7a9
Clippy all targets ( #153 )
...
* Fix clippy lints in tests
* CI: let clippy lint also tests
They deserve equal clippy love, right? :)
2021-09-15 23:47:24 +09:00
4265a1fbf1
docker-tests: speed up tests, combine client and server into one image
2021-09-15 22:57:48 +09:00
74eda56cbe
docker-tests: remove cargo-chef from image (broke build)
2021-09-15 22:05:59 +09:00
dff3b4d4ee
wireguard-control: update wireguard-control-sys version
2021-09-15 21:35:21 +09:00
ae89e06655
meta: make clippy happy
2021-09-15 21:18:04 +09:00
cacd80b283
server: prompt for listen port before endpoint
...
also fix a logic bug if user cancels port selection in client
when trying to override endpoint.
fixes #148
2021-09-15 20:43:40 +09:00
4fa689d400
meta: rename wgctrl to wireguard-control
...
in preparation for publishing on crates.io
2021-09-15 12:43:20 +09:00
454e5458c1
meta: release v1.5.0-beta.4
2021-09-14 23:18:30 +09:00
f774a5f97c
client: print endpoint reported by wireguard, not server
...
thanks again @strohel :)
2021-09-14 23:12:12 +09:00
b179a62a22
client: always show yourself as 'conneted' to avoid confusion
2021-09-14 22:49:08 +09:00
dcdaefd1ff
meta: release v1.5.0-beta.3
2021-09-14 22:34:08 +09:00
7ceebccbfa
client: fix logical inverse in is_recently_connected indicator
...
thanks @strohel!!
2021-09-14 22:33:49 +09:00
2a640fd9b2
meta: release v1.5.0-beta.2
2021-09-14 17:59:48 +09:00
ecdfd7f6d2
meta: cargo update
2021-09-14 17:58:22 +09:00
62821d5bdf
client: update hosts even when you're the only peer on the network
...
Fixes #144
2021-09-14 17:57:07 +09:00
dbb499a848
meta: release v1.5.0-beta.1
2021-09-14 17:26:46 +09:00
c4d41b805a
release.sh: support latest cargo-release
2021-09-14 17:26:11 +09:00
c94d9d2c03
shared: fix chmod in InterfaceConfig
2021-09-14 17:16:16 +09:00
cf3510918a
server: report local candidates for peers to connect ( #151 )
...
Before, only clients would report local addresses for NAT traversal. Servers should too! This will be helpful in common situations when the server is run inside the same LAN as other peers, and there's no NAT hairpinning enabled (or possible) on the router.
closes #146
2021-09-14 15:48:27 +09:00
df877d2de8
Add section about the removal of networks ( #142 )
2021-09-14 12:27:34 +09:00
120ac7d6b1
add "wireguard" as a recommended dependency for Debian. ( #149 )
...
It's very likely a user will want at least wireguard-dkms, and having
the userspace tools might be useful in an emergency. This metapackage
draws in both.
For automated installations in e.g. containers, use
apt install --no-install-recommends
to avoid installing recommended packages.
2021-09-14 12:27:10 +09:00
d4822afc98
meta: cargo clippy & fmt
2021-09-14 12:24:04 +09:00
b395f7f736
wgctrl-rs(userspace): fix linux build
2021-09-13 02:17:44 +09:00
b3d2d7f2eb
wgctrl-rs(userspace): remove subtle as dependency
2021-09-13 02:15:47 +09:00
c652a8f799
wgctrl-rs: no longer expose bytes of Key publicly
2021-09-13 02:05:57 +09:00
fa52dade2e
wgctrl-rs(userspace): use curve25519-dalek directly instead of x25519-dalek
...
This removes our need to use a forked version that had an updated rand dependency
2021-09-13 02:00:29 +09:00
c618d7949b
meta: cargo update && cargo fmt
2021-09-13 00:48:49 +09:00
42eb0a7589
client: wait for newline for uninstall
...
fixes #145
2021-09-13 00:46:06 +09:00
2a5a820bc2
client: create new data stores with 600 permissions
...
fixes #147
2021-09-13 00:43:53 +09:00
3689b068a2
shared: create dirs with 700 permissions
...
Closes #150
2021-09-13 00:43:27 +09:00
f715689540
shared(wg): remove leftover debug println on macOS
...
Closes #143
2021-09-12 20:34:02 +09:00
22203e63d0
server: addd ipv6 tests as feature flag alongside ipv4
2021-09-05 23:50:09 +09:00
9c5380c7f8
client, server: forbid using reserved IPv6 anycast addresses as unicast
...
Previously, we treated all IPv6 addresses as assignable, but that causes
problems with setups that expect the first address in a subnet to be the
router anycast address.
Note that this does not fix existing innernet networks, and those
experiencing this problem are advised to revised to recreate their
network after this fix has been merged. Sorry for the annoyance.
Fixes #131
2021-09-05 23:50:09 +09:00
20a07cf8fd
client: don't show Linux instructions outside of linux
...
fixes #128
2021-09-05 16:37:58 +09:00
b7de9cdc47
fix SQLite bug when migrating database from 1 to 2 ( #136 )
2021-09-02 02:25:34 +09:00
8903604caa
NAT traversal: ICE-esque candidate selection ( #134 )
...
This change adds the ability for peers to report additional candidate endpoints for other peers to attempt connections with outside of the endpoint reported by the coordinating server.
While not a complete solution to the full spectrum of NAT traversal issues (TURN-esque proxying is still notably missing), it allows peers within the same NAT to connect to each other via their LAN addresses, which is a win nonetheless. In the future, more advanced candidate discovery could be used to punch through additional types of NAT cone types as well.
Co-authored-by: Matěj Laitl <matej@laitl.cz>
2021-09-01 18:58:46 +09:00
fd06b8054d
shared(types): better self-documenting REJECT_AFTER_TYPE... type
2021-08-10 15:51:51 +09:00
Jake McGinty