Skip to content

cert-v2 chores - #1466

Merged
JackDoan merged 2 commits into
masterfrom
cert-v2-cleanup
Sep 5, 2025
Merged

cert-v2 chores#1466
JackDoan merged 2 commits into
masterfrom
cert-v2-cleanup

Conversation

@JackDoan

@JackDoan JackDoan commented Sep 4, 2025

Copy link
Copy Markdown
Collaborator

No description provided.

Comment thread lighthouse.go
Comment thread overlay/tun_linux.go
Comment thread pki.go
Comment thread lighthouse.go
return ok
}

// TODO: CERT-V2 IsLighthouseAddr should be sufficient, we just need to update the vpnAddrs for lighthouses after a handshake

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it is more burdensome to do that? This feels fine to me, but I'm open to making the change if you feel differently

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The goal of this TODO was to remove the loop and made a stab at how we might do it.

#1464 gave us a more reliable lh.addrMap for non primary vpn addrs in the static host map and a TODO in that PR was to update the RemoteList.vpnAddrs once we received and authenticated the certificate from the remote (to fix the remote_allow_ranges). With that, we would have a way to kill this loop.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ahhh I like that.

Do you feel this is a 1.10 blocker?

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Not specifically, it is a performance regression in some ways but I think it has low impact.

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

oh actually this is easier than I thought, I think. Pushed something that I think takes care of it

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

scooting this to new MR so we can merge everything else

@JackDoan
JackDoan marked this pull request as ready for review September 4, 2025 22:11
Comment thread lighthouse.go Outdated
@JackDoan
JackDoan merged commit 768325c into master Sep 5, 2025
9 checks passed
@JackDoan
JackDoan deleted the cert-v2-cleanup branch September 5, 2025 20:08
@wadey wadey added this to the v1.10.0 milestone Sep 10, 2025
@nbrownus nbrownus mentioned this pull request Nov 19, 2025
63 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants