Commit Graph

  • feb1e02e9c Verify the peer static on both FMP handshake paths, not just at rekey next Johnathan Corgan 2026-07-21 19:40:50 +00:00
  • c7047c0180 fix(openwrt): bind UDP dual-stack [::]:2121 so access-SSID clients reach it feat/openwrt-access-ssid Arjen 2026-07-21 17:05:24 +01:00
  • 9dab328bc9 feat(openwrt): enable mDNS rendezvous from fips-ap-setup Arjen 2026-07-19 18:50:59 +01:00
  • 958f70ce0e feat(openwrt): serve DHCPv4 on the access SSID from a fixed roamable subnet Arjen 2026-07-19 17:45:26 +01:00
  • e443cc2c59 docs(openwrt): correct open-SSID/mesh security framing — peering is open by design Arjen 2026-07-15 20:41:39 +02:00
  • cc7e40e843 feat(openwrt): open !FIPS access SSID — fips-ap-setup helper, default transport binding, how-to Arjen 2026-07-03 18:25:01 +02:00
  • deb5ded8eb Merge master into next after the v0.4.1 rollover Johnathan Corgan 2026-07-19 19:06:16 +00:00
  • 80c956a6fd Merge maint into master after the v0.4.1 rollover master Johnathan Corgan 2026-07-19 19:06:08 +00:00
  • 75d7077880 Open 0.4.2-dev cycle on maint after v0.4.1 release maint Johnathan Corgan 2026-07-19 19:05:13 +00:00
  • d0a0824768 Merge master into next after the v0.4.1 release Johnathan Corgan 2026-07-19 19:03:40 +00:00
  • a47ddbd5a5 Merge maint into master after the v0.4.1 release Johnathan Corgan 2026-07-19 18:57:52 +00:00
  • 15db6471db Set version to 0.4.1 and correct the v0.4.0 release date v0.4.1 Johnathan Corgan 2026-07-19 17:59:37 +00:00
  • 146d19a8d8 Add v0.4.1 changelog entry and release notes Johnathan Corgan 2026-07-19 17:21:57 +00:00
  • bda327b5f5 Raise the bloom antipoison FPR cap default to 0.20 Johnathan Corgan 2026-07-19 17:18:49 +00:00
  • 7089a2949b Merge branch 'master' into next Johnathan Corgan 2026-07-19 07:40:07 +00:00
  • ea74cd7e58 Merge branch 'maint' Johnathan Corgan 2026-07-19 07:40:07 +00:00
  • 78377208af Fix two sidecar container references that skipped the per-run suffix Johnathan Corgan 2026-07-19 07:40:07 +00:00
  • 0dea111fab Merge branch 'master' into next Johnathan Corgan 2026-07-19 07:17:26 +00:00
  • 37adb13d5b Merge branch 'maint' Johnathan Corgan 2026-07-19 07:17:26 +00:00
  • 26a579b1c9 Claim a free address range for the sidecar network instead of hardcoding one Johnathan Corgan 2026-07-19 07:17:19 +00:00
  • 564b31a914 Merge branch 'master' into next Johnathan Corgan 2026-07-19 06:48:17 +00:00
  • 93a5b71728 Merge branch 'maint' Johnathan Corgan 2026-07-19 06:46:55 +00:00
  • 3ebb14eda4 Make the admission-cap final peer_count read tolerate a busy daemon Johnathan Corgan 2026-07-19 06:46:50 +00:00
  • f1879b8fe9 Merge branch 'master' into next Johnathan Corgan 2026-07-19 06:45:39 +00:00
  • 4ff7de4d81 Merge branch 'maint' Johnathan Corgan 2026-07-19 06:45:18 +00:00
  • e4a854f6b0 Stop concurrent local CI runs from clobbering each other's containers Johnathan Corgan 2026-07-19 06:33:59 +00:00
  • afdae094dc Merge branch 'master' into next Johnathan Corgan 2026-07-19 06:15:21 +00:00
  • 0c3d9a0b73 Correct stale view-trait docs and drop internal shorthand from comments Johnathan Corgan 2026-07-19 06:11:40 +00:00
  • 60b1d27c0d Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-19 04:25:36 +00:00
  • 6e54161022 Merge branch 'next' into refactor-node-next Johnathan Corgan 2026-07-19 04:25:36 +00:00
  • 281ed132f1 Merge branch 'master' into refactor-node Johnathan Corgan 2026-07-19 04:25:36 +00:00
  • cb96a601c2 Merge branch 'master' into next Johnathan Corgan 2026-07-19 04:25:25 +00:00
  • c5492f4572 Merge branch 'maint' Johnathan Corgan 2026-07-19 04:25:25 +00:00
  • 7a97599921 testing: floor the rekey second-cutover wait at the log-analysis threshold Johnathan Corgan 2026-07-19 04:12:17 +00:00
  • 26bd1ada5b tests: guard the identity carrier and the inbound denial teardown Johnathan Corgan 2026-07-19 03:30:12 +00:00
  • b0cef7a221 Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-19 02:42:24 +00:00
  • 7fe1d75637 peer: delete the pending-connection type, leaving the control machine whole Johnathan Corgan 2026-07-19 01:18:05 +00:00
  • e21e09d7e6 peer: source the handshake identity and index family from the control machine Johnathan Corgan 2026-07-19 00:25:17 +00:00
  • e7537929ba node: move link, direction, and peer address onto the control machine Johnathan Corgan 2026-07-18 23:17:21 +00:00
  • 347cbe60bd peer: move the Noise handshake operations onto the control machine Johnathan Corgan 2026-07-18 22:55:38 +00:00
  • 11ec16777c node: yield the control machine when iterating pending connections Johnathan Corgan 2026-07-18 22:06:46 +00:00
  • 5b09e22956 node: read promotion's carrier fields in one borrow Johnathan Corgan 2026-07-18 21:45:09 +00:00
  • a382b17931 node: seed control machines directly in tests, ahead of removing the leg Johnathan Corgan 2026-07-18 21:24:03 +00:00
  • a3c53a3b3c Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-18 20:42:45 +00:00
  • 1e6b4cb918 Merge branch 'next' into refactor-node-next Johnathan Corgan 2026-07-18 20:42:45 +00:00
  • a90049d3a1 Merge branch 'master' into refactor-node Johnathan Corgan 2026-07-18 20:38:56 +00:00
  • df52ce459c Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-18 18:24:44 +00:00
  • 791b35c221 node: make the peer machine's connection state the sole session-index carrier Johnathan Corgan 2026-07-18 17:19:44 +00:00
  • 6a80790742 node: source connection index/transport/stats from the peer machine Johnathan Corgan 2026-07-18 16:43:22 +00:00
  • 60b8acf716 node: source handshake resend buffers from the peer machine Johnathan Corgan 2026-07-18 16:00:15 +00:00
  • 4fc295d90a node: source connection peer-identity telemetry from the peer machine Johnathan Corgan 2026-07-18 15:32:04 +00:00
  • b3f2018fce node: source connection start/activity timestamps from the peer machine Johnathan Corgan 2026-07-18 15:11:43 +00:00
  • 91ba660213 Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-18 04:08:26 +00:00
  • 7ea5718270 Merge branch 'master' into next Johnathan Corgan 2026-07-18 02:57:30 +00:00
  • 56bbc81a40 node: derive handshake state from the peer machine, delete the leg field Johnathan Corgan 2026-07-18 02:26:39 +00:00
  • f7fa257349 node: classify inbound msg3 via a single machine decision site Johnathan Corgan 2026-07-17 21:02:05 +00:00
  • 7e5619ad32 peer: return the inbound msg3 decision from the machine arm Johnathan Corgan 2026-07-17 20:43:08 +00:00
  • b1adbe3af7 Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-17 20:19:33 +00:00
  • b38f8c6ffb node: classify inbound msg1 via a single machine decision site Johnathan Corgan 2026-07-17 19:17:25 +00:00
  • cf62cff5f4 feat: Android-ready core: target_os gating and app-owned TUN seam Arjen 2026-07-14 14:40:43 +02:00
  • 7fe3388f2f peer: return the inbound establish decision from the machine arm Johnathan Corgan 2026-07-17 13:47:50 +00:00
  • f65cd07048 Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-17 07:43:36 +00:00
  • 252d16fab9 node: feed msg1 send failure to the peer machine as an event Johnathan Corgan 2026-07-17 07:12:40 +00:00
  • 94d7b91244 node: route the outbound msg2 establish decision through the machine Johnathan Corgan 2026-07-17 06:59:30 +00:00
  • 7790eb86bd peer: make the outbound msg2 swap/keep machine arms decision-only Johnathan Corgan 2026-07-17 06:44:09 +00:00
  • 4fa565e528 Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-17 05:07:36 +00:00
  • cf1c957336 node: embed the handshake leg in the peer machine, drop the connections map Johnathan Corgan 2026-07-17 04:27:53 +00:00
  • ba3c552dce node: give anonymous outbound legs a persistent control machine Johnathan Corgan 2026-07-17 03:25:28 +00:00
  • d6785f2970 node: make the inbound handshake machine persistent across its leg's life Johnathan Corgan 2026-07-17 02:54:00 +00:00
  • 3f9de1adcd Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-17 02:13:31 +00:00
  • 5ccd95cf3f node: add a debug-build peer-map coherence check Johnathan Corgan 2026-07-17 02:09:28 +00:00
  • 4779a3970d Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-17 01:41:21 +00:00
  • 119b85d28e node: correct stale liveness claims in machine, executor, and timer docs Johnathan Corgan 2026-07-17 01:33:06 +00:00
  • 74245e80ac peer: remove the dead PeerSlot enum and PeerConnection resend API Johnathan Corgan 2026-07-17 01:32:49 +00:00
  • 5a8da01f24 Merge branch 'master' into next Johnathan Corgan 2026-07-16 05:56:36 +00:00
  • e42598a86e Merge branch 'maint' into master Johnathan Corgan 2026-07-16 05:55:20 +00:00
  • 054d17aac5 feat(openwrt): 802.11s open-mesh backhaul support Arjen 2026-07-13 11:29:02 +02:00
  • fbb4fb8879 testing: wait for both second-cycle rekey cutovers before asserting the count Johnathan Corgan 2026-07-16 00:42:04 +00:00
  • 252b77683e Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-16 00:04:31 +00:00
  • 87399795f8 node: observe rekey-msg2 and cross-connection resolution in the per-peer machine Johnathan Corgan 2026-07-15 23:50:18 +00:00
  • 2fad6be5e6 node: execute inbound session-swap effects through the per-peer machine Johnathan Corgan 2026-07-15 23:12:48 +00:00
  • efbfb32e07 Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-15 21:38:52 +00:00
  • 765819f52b node: reap the handshake timeout through the per-peer machine timer Johnathan Corgan 2026-07-15 20:23:49 +00:00
  • 5021197f5c node: drive the handshake msg1 resend from the per-peer machine timer Johnathan Corgan 2026-07-15 19:38:49 +00:00
  • 31f5a8c1b7 peer: add a per-peer timer store populated by the machine timer actions Johnathan Corgan 2026-07-15 18:49:50 +00:00
  • 8abcd6ff8c Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-15 15:52:29 +00:00
  • 3e7ca90212 peer: drive the connection-oriented outbound dial through the machine Johnathan Corgan 2026-07-15 14:40:58 +00:00
  • 9588c50063 peer: persist the outbound control machine at dial, not at msg1 prepare Johnathan Corgan 2026-07-15 14:12:49 +00:00
  • 3798ba853c fix(openwrt): ship mesh transports commented, uncomment on setup feat/openwrt-packaging Arjen 2026-07-13 11:29:02 +02:00
  • cdf384d730 docs(openwrt): document STA-on-same-radio channel capture; warn in fips-mesh-setup Arjen 2026-07-07 15:10:04 +02:00
  • 47ce287360 docs(openwrt): clarify dual-band mesh is failover, not multipath Arjen 2026-07-07 14:12:22 +02:00
  • c0fcbb6963 style(openwrt): grep -q in the free-index probe (shellcheck SC2143) Arjen 2026-07-02 22:51:26 +02:00
  • 0284f55405 feat(openwrt): dual-band mesh backhaul — one fips-mesh-setup instance per radio Arjen 2026-07-02 22:38:27 +02:00
  • e5c484b990 fix(openwrt): surface the same-channel requirement in fips-mesh-setup and the backhaul guide Arjen 2026-07-02 15:19:28 +02:00
  • 413cb8216a feat(openwrt): 802.11s open-mesh backhaul — fips-mesh-setup helper, default transport binding, how-to Arjen 2026-07-02 14:43:15 +02:00
  • f698da50b6 peer: add unit coverage for the connection-oriented outbound dial path Johnathan Corgan 2026-07-15 13:52:34 +00:00
  • 1f765cfd8f peer: drive the connectionless outbound msg1 send through the machine Johnathan Corgan 2026-07-15 06:15:21 +00:00
  • 3b99a416ad peer: persist the outbound control machine at dial Johnathan Corgan 2026-07-15 04:06:44 +00:00
  • e064c96df3 peer: route peer-loss reports by kind Johnathan Corgan 2026-07-15 03:37:31 +00:00
  • 4620d9f82e Merge branch 'refactor-node' into refactor-node-next Johnathan Corgan 2026-07-15 01:30:14 +00:00