Andy Oknen
443f9d0afd
Add safe file operation wrappers and enhance path validation in configuration handling. Implemented safeReadFile, safeWriteFile, and safeStat functions to ensure file paths are validated before operations. Added checks for system directory access and path depth limits to improve security. Updated documentation to reflect these changes and included validation comments in the source code.
2025-08-15 20:08:43 +00:00
Andy Oknen
102e8e265e
Add path validation for configuration files to prevent path traversal attacks. Implemented validateConfigPath function to sanitize and check file paths before use in configuration settings. Updated relevant functions to utilize this validation, ensuring security and integrity of file operations.
2025-08-15 19:56:30 +00:00
Andy Oknen
ee470d32a7
Implement configuration management in WebUI with API integration for loading and saving configurations
2025-08-04 08:30:55 +00:00
Andy Oknen
675e2e71a5
Implement Admin API integration in WebUI for enhanced node management
2025-07-30 15:53:09 +00:00
Andy Oknen
113dcbb72a
Add password authentication to WebUI and implement session management
...
- Updated WebUI configuration to include a password field for authentication.
- Enhanced the WebUI server to handle login and logout functionality with session management.
- Added tests for authentication and session handling.
- Updated README and example configuration to reflect new authentication features.
2025-07-30 08:34:29 +00:00
Andy Oknen
51a1a0a3d7
Refactor web UI server setup in main.go and update default host in config
2025-07-29 21:03:03 +00:00
Andy Oknen
345d5b9cbd
Add minimal Web UI server
2025-07-29 20:14:41 +00:00
Andy Oknen
d741657948
Refactor configuration struct comments and update default multicast interface settings
2025-07-29 18:50:47 +00:00
Neil Alexander
2454970e4d
Tweaks to configuration
2024-11-22 09:47:33 +00:00
Neil Alexander
ff0ef7ff56
Update comments in default configuration file
2024-10-27 20:59:05 +00:00
Paul Donald
f56f9c124c
Minor Fixes ( #1107 )
...
* Minor comment fixes.
* Optimize PeerEntry for memory efficiency
* Improve NodeConfig for memory alignment
2024-05-27 21:57:28 +01:00
Neil Alexander
f6f669617f
Fix -normaliseconf when using PrivateKeyPath
2023-11-26 16:20:52 +00:00
Neil
0b578a637a
Debian package updates ( #1073 )
...
* Update Debian package
* Don't put `AdminListen` in config by default, fix path in Debian package
* Fix path in unit file
* Preserve original service files for other packages
---------
Co-authored-by: Neil Alexander <neilalexander@users.noreply.github.com>
2023-10-28 14:58:52 +01:00
Arceliar
d17ac39789
update ironwood dependency, add a debug API call for lookups
2023-10-28 05:26:43 -05:00
Neil Alexander
2a21241738
Multicast passwords
2023-10-11 19:28:28 +01:00
Neil Alexander
45b773eade
Remove TLS root validation
...
This is just too complicated compared to the per-peer/per-listener/per-interface password
approach.
2023-10-11 18:25:35 +01:00
Neil Alexander
002b984c04
Fix private key setup when certificate not specified
2023-06-18 18:10:27 +01:00
Neil Alexander
e290e744f4
Fix -autoconf
2023-05-20 10:54:49 +01:00
Neil Alexander
7afa23be4c
Link refactoring, admin socket changes
2023-05-19 19:09:05 +01:00
Neil Alexander
590d83aa9c
Fix #975 by not exporting uint8
2022-11-01 17:42:52 +00:00
Neil Alexander
f08dec822a
Priority support ( #964 )
...
* Allow setting link priorities
* Fix a bug
* Allow setting priority on listeners and multicast interfaces
* Update `yggdrasilctl`
* Update to Arceliar/ironwood#5
2022-10-26 09:24:24 +01:00
Neil Alexander
69632bacb5
Tidy up
2022-10-02 13:20:39 +01:00
Neil Alexander
e165b1fa0c
Add quote marks to InterfacePeers comment
...
Fixes #945 .
2022-09-24 14:44:50 +01:00
Arceliar
de853fed10
multicast configuration changes
2021-06-27 17:24:46 -05:00
Arceliar
2874ce1327
change multicast config format
2021-06-27 03:15:41 -05:00
Arceliar
2a7a53b6b6
move GenerateConfig to defaults, to adjust dependency ordering, needed for stuff later
2021-06-27 02:18:51 -05:00
Neil Alexander
39361af789
Update config comments
2021-06-19 17:51:11 +01:00
Arceliar
e7da3d72c4
remove session firewall, this can't prevent memory use so it's better to just use OS native tools
2021-06-06 02:35:02 -05:00
Neil Alexander
4a684e7caf
Don't add mutex to config output
2021-06-05 21:48:20 +01:00
Neil Alexander
166336a418
Remove config.NodeState (hot reconfig is no longer supported)
2021-06-02 14:19:32 +01:00
Arceliar
0343dad934
remove obsolete crypto package
2021-05-23 14:33:28 -05:00
Neil Alexander
416eadbcff
Use uint64 for MTU for forward-compatibility
2021-05-16 20:00:45 +01:00
Neil Alexander
2d01386d6e
Refactor admin socket, export request/response structs, remove types package
2021-05-16 19:51:09 +01:00
Arceliar
85fae23919
remove TunnelRouting from config, remove Signing from key names
2021-05-15 15:00:12 -05:00
Neil Alexander
e12c639c21
Remove obsolete switch options
2021-05-10 22:42:57 +01:00
Neil Alexander
05caf36f4e
Fix AllowedPublicKeys
2021-05-10 22:39:12 +01:00
Neil Alexander
bb92e61e68
Remove encryption public key options (they are now derived from ed25519 key conversion in IW), also bump link version number
2021-05-10 22:06:38 +01:00
Adam Ruzicka
8358fe5c5c
Unify MTU datatypes across the codebase
...
The codebase uses int and unit16 to represent MTU randomly. This change
unifies it to a MTU type from types package, which is currently uint16.
2020-01-05 18:01:22 +00:00
Dimitris Apostolou
73f50af3b7
Fix typos
2019-11-29 11:45:02 +02:00
Neil Alexander
f95ebeb821
Remove references to TAP
2019-11-22 20:08:19 +00:00
Neil Alexander
f5517acc81
Drop Water, use Wireguard tun library, drop TAP support
2019-11-22 16:43:50 +00:00
Neil Alexander
af3dcb44d8
Update config.go godoc
2019-09-02 09:45:11 +01:00
Neil Alexander
2a629880fd
Rename crypto-key config options, improve control flow
2019-08-19 10:28:30 +01:00
Neil Alexander
de1005e4fa
Various API changes and simplifications to fix mobile builds
2019-07-27 15:00:09 +01:00
Neil Alexander
17175b49f2
Add multicast interfaces to platform-specific defaults (this makes it easier to avoid bringing AWDL up by default on macOS as an example, or over L2 VPNs when not expected)
2019-06-11 10:18:59 +01:00
Neil Alexander
9bc24f8dbf
Return both current and previous config when replacing
2019-04-15 22:00:38 +01:00
Neil Alexander
0b494a8255
Refactoring: move tuntap and icmpv6 into separate package
2019-03-28 00:30:25 +00:00
Neil Alexander
41872820c3
Remove isAutoconf option to GenerateConfig
2019-03-12 19:18:43 +00:00
Neil Alexander
4062c93e18
Re-order config, update default Listen
2019-03-12 19:04:30 +00:00
Neil Alexander
830be7f4db
Update comments again
2019-03-12 16:06:12 +00:00
