eb90cc53a5
Fix clippy warnings, add clippy to CI ( #127 )
...
* Tidy code a bit thanks to clippy
Clippy 1.54 newly detects some redundant constructs, that's nice.
sort_unstable() should yield exact same results as sort() for `Vec<&str>`
and could be faster, clippy says.
* Add clippy to CI
2021-08-09 20:35:42 +09:00
e97eb737a4
shared(PeerDiff): refactor struct and update peer endpoints only when handshake failed
...
The past behavior of clients was to, on every fetch from the server, update each of its peer's endpoints with the one reported from the server. While this wasn't a problem on certain types of NATs to help with holepunching, in some situations it caused previously working connections to no longer work (when one peer had a port-restricted or symmetric cone type NAT).
2021-08-05 09:38:14 +09:00
b169435355
meta: release v1.4.1
2021-08-03 01:26:38 +09:00
bbfb11e175
meta: cargo update & clippy fixes
2021-07-27 14:14:50 +09:00
118986e5e3
meta: release v1.4.0
2021-07-11 22:16:20 +09:00
4afa8a8a4e
shared(types): CidrTree: re-add with_root, rewrite leaves()
2021-06-23 20:54:05 +09:00
62e6464064
shared(types): undo with_root until a rewrite of leaves()
2021-06-23 20:31:22 +09:00
3c8530d956
shared: add with_root method in CidrTree
2021-06-23 16:11:37 +09:00
0c8a2ee991
meta: cargo clippy
2021-06-22 11:27:29 +09:00
7bc1033b58
meta: cargo clippy
2021-06-16 20:34:53 +09:00
d8513d3d54
meta: release v1.4.0-beta.3
2021-06-16 20:28:52 +09:00
1aed782683
client: tighten some error types and apply helptext to io::Error
2021-06-16 20:26:01 +09:00
93b4b0b43c
meta: release v1.4.0-beta.2
2021-06-14 23:53:02 +09:00
d6ab8e6653
shared(wg): default to 1400 if network CIDR is IPv6
...
Second fix for #102
2021-06-14 23:06:04 +09:00
4a458a413c
meta: cargo fmt
2021-06-14 19:10:31 +09:00
d431953353
client, server: configurable MTU via --mtu
...
ex: innernet --mtu 1400 up foobarnet
Closes #102
2021-06-14 19:06:40 +09:00
647ec7ca3e
shared: proactively create invite file to ensure we have permission
...
This won't clean up an empty file if a later step fails, but this
is still better than the previous solution.
Closes #91
2021-06-14 18:15:31 +09:00
3a1f5cab6b
meta: release v1.4.0-beta.1
2021-06-14 15:54:50 +09:00
72ef070ef3
shared(prompts): fail on no TTY if interactivity was needed
...
Fixes #98
2021-06-14 15:52:15 +09:00
449b4b8278
client: support running as non-root ( #94 )
...
shared(wg): use netlink instead of execve calls to "ip"
hostsfile: write to hostsfile in-place
2021-06-10 22:57:47 +09:00
ba0b062ce9
meta: release v1.3.1
2021-06-01 00:58:09 +09:00
15e9c08a8a
shared(wg): remove leftover debugging command
...
Fixes #95
doy.
2021-05-31 16:27:04 +09:00
ec210f9468
client, server: adds ability to rename peers ( #92 )
...
This commit adds a subcommand to both the client and server to allow
changing the name of a peer. The peer retains all the same attributes as
before (public keys, IPs, admin/disabled status, etc.).
Closes #87
2021-05-25 19:58:00 +09:00
2d012c6bd9
meta: release v1.3.0
2021-05-21 14:46:30 +09:00
b4fb9f9250
client, server: new CIDRs must be hostname-compatible
...
towards the goal of supporting #82
2021-05-21 13:35:07 +09:00
911a2d8f00
shared(prompts): wait for newline on confirmations
2021-05-21 13:02:11 +09:00
ff0527d836
client, server: adds ability to delete cidrs ( #88 )
...
This commit adds a `delete-cidr` to both the client and server. It walks
through the prompts just like adding a CIDR.
Only eligible CIDRs are presented to the user. Eligibilty requires:
- CIDR has no child CIDRs
- CIDR has no assigned peers
Closes #23
2021-05-21 12:39:33 +09:00
e2011b4260
meta: release v1.3.0-beta.7
2021-05-20 13:05:03 +09:00
25a4a0eb41
meta: release v1.3.0-beta.6
2021-05-20 03:44:45 +09:00
c512985214
meta: remove unused code and format
2021-05-20 03:18:43 +09:00
5b744d1f78
client, wgctrl: fix various linux userspace issues
...
Fixes #75
2021-05-20 03:16:48 +09:00
e95d79db66
client: add verbose logging
2021-05-20 03:16:48 +09:00
08b975e847
meta: release v1.3.0-beta.5
2021-05-19 16:59:27 +09:00
3892a99156
wgctrl: use wireguard backends explicitly (with OS-specific defaults) ( #85 )
...
Based on the conversation from #5 (comment) - this changes innernet's behavior on Linux from automatically falling back to the userspace, instead requiring --backend userspace to be specified.
This should help people avoid weird situations in environments like Docker.
2021-05-19 16:54:07 +09:00
170c8267bf
client, server: make adding routes optional ( #71 )
2021-05-12 02:31:47 +09:00
3cb766f795
shared(prompts): add consent prompt for public IP query
...
Closes #73
2021-05-10 04:39:46 +09:00
ac01b8c9aa
meta: release v1.3.0-beta.4
2021-05-10 04:18:47 +09:00
46d9783109
publicip: don't explode, just leave as None
2021-05-10 04:17:02 +09:00
426916fadd
meta: make clippy happy
2021-05-10 00:09:50 +09:00
9d4eb80177
meta: release v1.3.0-beta.3
2021-05-09 21:37:19 +09:00
981f7e8701
shared: add better visibility into IO errors
2021-05-09 21:34:11 +09:00
54e7c1b183
server(new): add more explanation text at beginning
2021-05-09 21:04:49 +09:00
d4d0d7301a
meta: release v1.3.0-beta.2
2021-05-09 20:07:27 +09:00
0000488910
client, server: create own crate for public ip resolution ( #72 )
2021-05-09 19:57:52 +09:00
78c2bfd6db
meta: release v1.3.0-beta.1
2021-05-09 03:37:03 +09:00
fb1de8e210
shared(wg): don't fail silently on bringing the interface up
2021-05-09 02:17:23 +09:00
2ce552cc36
client, server: invite expirations
...
The server now expects a UNIX timestamp after which the invitation will be expired. If a peer invite hasn't been redeemed after it expires, the server will clean up old entries and allow the IP to be re-allocated for a new invite.
Closes #24
2021-05-09 00:32:51 +09:00
76500b3778
shared(prompts): simplify cidr selection code
2021-05-07 15:45:32 +09:00
f27a2426c8
client: make clippy happy
2021-05-06 12:40:00 +09:00
c01c2be4bb
server: switch from using warp directly to hyper ( #67 )
...
Closes #53
2021-05-06 12:32:54 +09:00
f18fe14553
{client,server}: hide innernet-server CIDR from selection menus
...
It's a special /32 CIDR that is un-interactable, so is only taking
up space.
Closes #63
2021-05-04 11:34:16 +09:00
c6bb8052fb
meta: release v1.2.0
2021-04-24 23:39:28 +09:00
378aa8383c
meta: release v1.2.0-beta.1
2021-04-21 01:13:44 +09:00
0a26bdedce
{client,server}: allow hostnames in endpoints ( #56 )
...
use new Endpoint type instead of SocketAddr in appropriate places
2021-04-21 00:35:10 +09:00
e2ea2ddded
docker-tests: initial integration tests ( #55 )
...
Scripts that demonstrate building a network of docker containers, doubling as an integration test for innernet.
Includes a number of improvements to the recent non-interactive CLI changes as well.
2021-04-19 21:56:18 +09:00
c4e369ee54
server: non-interactive network creation
2021-04-18 01:32:56 +09:00
b92ad65b17
client: add opts for non-interactive network installs
2021-04-17 12:33:24 +09:00
6d28e7f4ab
{client,server}: allow peer/cidr creation with CLI arguments ( #48 )
...
Fixes #20
2021-04-15 00:25:31 +09:00
cb0e76c39b
meta: release v1.1.0
2021-04-11 16:42:24 +09:00
05d78eb253
shared: add types module
2021-04-11 14:56:47 +09:00
e8790f3178
meta: release v1.1.0-rc.2
2021-04-11 13:34:09 +09:00
dcf553c8fd
shared: update chmod util to ignore non-perm bits
2021-04-10 17:13:00 +09:00
6c55dafce6
meta: release v1.1.0-rc.1
2021-04-09 22:47:33 +09:00
c370c25924
server: add uninstall command
2021-04-09 22:42:29 +09:00
a44fe0d3ad
client: add uninstall command
2021-04-09 22:37:33 +09:00
bd7987f82f
meta: release v1.0.2-rc.2
2021-04-09 15:02:44 +09:00
72dc14c49c
{client,server}: enforce permissions on directories and files
...
This may become a warning rather than an action later, but for now
let's make sure older installations that had incorrect permissions
are taken care of.
2021-04-09 15:00:53 +09:00
ee890ccaa7
meta: release v1.0.2-rc.1
2021-04-09 14:14:43 +09:00
a87d56cfc9
{client,server}: send and require a header that contains the server public key
...
This is a stop-gap CSRF protection mechanism from unsophisticated attacks. It's to be considered a temporary solution until a more complete one can be implemented, but it should be sufficient in most cases for the time being.
See https://github.com/tonarino/innernet/issues/38 for further discussion.
2021-04-09 13:48:00 +09:00
b1e1ff8f4f
wgctrl-sys: Remove some unsafe in the kernel backend
...
Validates WireGuard interfaces against the linux specification for interface names.
Refactor userspace and other OSes to use InterfaceName
2021-04-09 10:28:37 +09:00
1e1436bfa5
(cargo-release) version v1.0.1
2021-04-08 11:09:54 +09:00
17f56556ea
meta: include tickets for git-based cargo dependencies
2021-04-06 13:33:55 +09:00
c3ae74bd34
Fix macos ip/route setup for ipv6 nets
2021-03-31 18:22:13 +02:00
c49f061bb7
kabloomers. public release v1.0.0
2021-03-30 02:47:34 +09:00
Matěj Laitl