aboutsummaryrefslogtreecommitdiffstats
path: root/testing/wireguard-tools
Commit message (Collapse)AuthorAgeFilesLines
* wireguard-tools: move to communityCarlo Landmeter2019-05-212-78/+0
| | | | Closes: GH-7980
* testing/wireguard-*: upgrade to 20190406André Klitzing2019-04-091-2/+2
|
* testing/wireguard: upgrade to 0.0.20190227Jason A. Donenfeld2019-02-281-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * wg-quick: freebsd: allow loopback to work FreeBSD adds a route for point-to-point destination addresses. We don't really want to specify any destination address, but unfortunately we have to. Before we tried to cheat by giving our own address as the destination, but this had the unfortunate effect of preventing loopback from working on our local ip address. We work around this with yet another kludge: we set the destination address to 127.0.0.1. Since 127.0.0.1 is already assigned to an interface, this has the same effect of not specifying a destination address, and therefore we accomplish the intended behavior. Note that the bad behavior is still present in Darwin, where such workaround does not exist. * tools: remove unused check phony declaration * highlighter: when subtracting char, cast to unsigned * chacha20: name enums * tools: fight compiler slightly harder * tools: c_acc doesn't need to be initialized * queueing: more reasonable allocator function convention Usual nits. * systemd: wg-quick should depend on nss-lookup.target Since wg-quick(8) calls wg(8) which does hostname lookups, we should probably only run this after we're allowed to look up hostnames. * compat: backport ALIGN_DOWN * noise: whiten the nanoseconds portion of the timestamp This mitigates unrelated sidechannel attacks that think they can turn WireGuard into a useful time oracle. * hashtables: decouple hashtable allocations from the main device allocation The hashtable allocations are quite large, and cause the device allocation in the net framework to stall sometimes while it tries to find a contiguous region that can fit the device struct. To fix the allocation stalls, decouple the hashtable allocations from the device allocation and allocate the hashtables with kvmalloc's implicit __GFP_NORETRY so that the allocations fall back to vmalloc with little resistance. * chacha20poly1305: permit unaligned strides on certain platforms The map allocations required to fix this are mostly slower than unaligned paths. * noise: store clamped key instead of raw key This causes `wg show` to now show the right thing. Useful for doing comparisons. * compat: ipv6_stub is sometimes null On ancient kernels, ipv6_stub is sometimes null in cases where IPv6 has been disabled with a command line flag or other failures. * Makefile: don't duplicate code in install and modules-install * Makefile: make the depmod path configurable * queueing: net-next has changed signature of skb_probe_transport_header A 5.1 change. This could change again, but for now it allows us to keep this snapshot aligned with our upstream submissions. * netlink: don't remove allowed ips for new peers * peer: only synchronize_rcu_bh and traverse trie once when removing all peers * allowedips: maintain per-peer list of allowedips This is a rather big and important change that makes it much much faster to do operations involving thousands of peers. Batch peer/allowedip addition and clearing is several orders of magnitude faster now. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard-tools: fix quotes in checksumNatanael Copa2019-01-251-1/+1
|
* testing/wireguard: upgrade to 0.0.20190123Jason A. Donenfeld2019-01-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * tools: curve25519: handle unaligned loads/stores safely This should fix sporadic crashes with `wg pubkey` on certain architectures. * netlink: auth socket changes against namespace of socket In WireGuard, the underlying UDP socket lives in the namespace where the interface was created and doesn't move if the interface is moved. This allows one to create the interface in some privileged place that has Internet access, and then move it into a container namespace that only has the WireGuard interface for egress. Consider the following situation: 1. Interface created in namespace A. Socket therefore lives in namespace A. 2. Interface moved to namespace B. Socket remains in namespace A. 3. Namespace B now has access to the interface and changes the listen port and/or fwmark of socket. Change is reflected in namespace A. This behavior is arguably _fine_ and perhaps even expected or acceptable. But there's also an argument to be made that B should have A's cred to do so. So, this patch adds a simple ns_capable check. * ratelimiter: build tests with !IPV6 Should reenable building in debug mode for systems without IPv6. * noise: replace getnstimeofday64 with ktime_get_real_ts64 * ratelimiter: totalram_pages is now a function * qemu: enable FP on MIPS Linux 5.0 support. * keygen-html: bring back pure javascript implementation Benoît Viguier has proofs that values will stay well within 2^53. We also have an improved carry function that's much simpler. Probably more constant time than emscripten's 64-bit integers. * contrib: introduce simple highlighter library This is the highlighter library being used in: - https://twitter.com/EdgeSecurity/status/1085294681003454465 - https://twitter.com/EdgeSecurity/status/1081953278248796165 It's included here as a contrib example, so that others can paste it into their own GUI clients for having the same strictly validating highlighting. * netlink: use __kernel_timespec for handshake time This readies us for Y2038. See https://lwn.net/Articles/776435/ for more info. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard-tools: split wg and wg-quickCarlo Landmeter2019-01-052-25/+28
| | | | | | | | We split wg and wg-quick into seperate packages but let the main pacakge pull both of them in. This way they can have their own deps and we can pull them in independently. We also patch wg-quick to ue busybox sysctl.
* testing/wireguard-tools: add missing dependsStuart Cardall2019-01-032-3/+32
| | | | | | | | | | | | | | | | | wg-quick does not work with some of the busybox built-ins. based on original report by Nathan Caldwell (saintdev at gmail dot com) adds depends for: procps iproute2 coreutils (for sysctl -r) but NOT for Bash (which is required by wg-quick only & not by other wg-tools) see also: https://github.com/alpinelinux/aports/pull/3903 https://lists.zx2c4.com/pipermail/wireguard/2018-December/003608.html
* testing/wireguard: upgrade to 0.0.20181218Jason A. Donenfeld2018-12-181-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20181119Jason A. Donenfeld2018-11-201-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20181115Jason A. Donenfeld2018-11-151-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20181018Jason A. Donenfeld2018-10-231-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard-tools: Document pkgrel/_toolsrel requirementJonathan Neuschäfer2018-10-231-0/+1
|
* testing/wireguard: upgrade to 0.0.20181006Jason A. Donenfeld2018-10-151-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180918Jason A. Donenfeld2018-09-191-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180910Jason A. Donenfeld2018-09-131-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180904Jason A. Donenfeld2018-09-041-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180809Jason A. Donenfeld2018-08-211-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180802Jason A. Donenfeld2018-08-051-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180718Jason A. Donenfeld2018-07-191-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180708Jason A. Donenfeld2018-07-111-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180625Jason A. Donenfeld2018-06-251-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180613Jason A. Donenfeld2018-06-151-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180531Jason A. Donenfeld2018-06-061-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180519Jason A. Donenfeld2018-05-191-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180513Jason A. Donenfeld2018-05-141-3/+3
| | | | | | We also fix #4235 by adjusting the rel variables. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180420Jason A. Donenfeld2018-04-231-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180413Jason A. Donenfeld2018-04-171-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* Revert "testing/wireguard-tools: depends on bash"Jason A. Donenfeld2018-04-101-2/+1
| | | | | | | | | | | | | This reverts commit 548c24ea1e19b3739a24556248ebbde4f300e14a, which was snuck in while I was on vacation. There are users of Alpine+WireGuard who don't need or use wg-quick and thus don't need or use bash. This therefore should not be a required dependency of the package. This also breaks the pkgrel consistency with the kernel packages. So, we revert. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com> Fixes: #3640
* testing/wireguard-tools: Fix examples installation pathJonathan Neuschäfer2018-04-021-3/+3
| | | | | | | WireGuard's examples directory should be installed to /usr/share/doc/wireguard-tools/examples, not /usr/share/doc/examples. It seems that this was intended in the APKBUILD, but the code that copies the examples directory relies on $_name, which is not set. Use $pkgname instead.
* testing/wireguard-tools: depends on bashJonathan Neuschäfer2018-03-281-1/+2
| | | | wg-quick is explicitly a bash script, so it requires bash to be installed.
* testing/wireguard: upgrade to 0.0.20180304Jason A. Donenfeld2018-03-051-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180218Jason A. Donenfeld2018-02-191-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: upgrade to 0.0.20180202Jason A. Donenfeld2018-02-041-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard-tools: upgrade to 0.0.20180118Jason A. Donenfeld2018-01-191-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* [various]: unify names of licenses according to SPDXJakub Jirutka2017-12-301-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit updates $license variable in all APKBUILDs to comply with short names specified by SPDX version 3.0 [1] where possible. It was done using find-and-replace method on substrings inside $license variables. Only license names were updated, not "expressions" specifying relation between the licenses (e.g. "X and Y", "X or Y", "X and (Y or Z)") or exceptions (e.g. "X with exceptions"). Many licenses have a version or multiple variants, e.g. MPL-2.0, BSD-2-Clause, BSD-3-Clause. However, $license in many aports do not contain license version or variant. Since there's no way how to infer this information just from abuild, it were left without the variant suffix or version, i.e. non SPDX compliant. GNU licenses (AGPL, GFDL, GPL, LGPL) are especially complicated. They exist in two variants: -only (formerly e.g. GPL-2.0) and -or-later (formerly e.g. GPL-2.0+). We did not systematically noted distinguish between these variants, so GPL-2.0, GPL2, GPLv2 etc. may mean GPL-2.0-only or GPL-2.0-or-later. Thus GNU licenses without "+" (e.g. GPL2+) were left without the variant suffix, i.e. non SPDX compliant. Note: This commit just fixes format of the license names, no verification has been done if the specified license information is actually correct! [1]: https://spdx.org/licenses/
* testing/wireguard: version bumpJason A. Donenfeld2017-12-251-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: version bumpJason A. Donenfeld2017-12-131-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: version bumpJason A. Donenfeld2017-11-281-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: version bumpJason A. Donenfeld2017-11-161-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: version bumpJason A. Donenfeld2017-11-011-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: version bumpJason A. Donenfeld2017-10-191-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: version bump to 0.0.20171011Jason A. Donenfeld2017-10-121-2/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard: version bump to 0.0.20171005Jason A. Donenfeld2017-10-091-3/+2
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard-tools: build fix: remove a.outNatanael Copa2017-10-021-0/+1
| | | | remove a.out which likely was unintentionally added.
* wireguard: bump to 0.0.20171001Jason A. Donenfeld2017-10-021-3/+3
| | | | Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
* testing/wireguard-tools: upgrade to 0.0.20170918Stuart Cardall2017-10-011-2/+2
|
* testing/wireguard: version bump to 0.0.20170907Jason A. Donenfeld2017-09-121-2/+2
|
* testing/wireguard: version bump to 0.0.20170810Jason A. Donenfeld2017-08-111-2/+2
|
* testing/wireguard-tools: update to 0.0.20170726Stuart Cardall2017-07-281-4/+4
|
* testing/wireguard-tools: update to 0.0.20170629Jason A. Donenfeld2017-06-301-2/+2
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-01-27 18:20:16 +0000