try to make certificate addition/removal reloadable in some cases - #1468

Merged

JackDoan merged 16 commits into

cert-v2-reloads

Nov 4, 2025

Commits on Oct 2, 2025

try to make certificate addition/removal reloadable in some cases
JackDoan
committed
a6640b4
working e2e test?!
JackDoan
committed
0721dde
don't wait forever
JackDoan
committed
241b0a6
squish bug from cert removals
JackDoan
committed
d2d3e21
very spicy change to respond to handshakes with cert versions we cannot match with a cert that we can indeed match
JackDoan
committed
0946831
even spicier change to rehandshake if we detect our cert is lower-version than our peer, and we have a newer-version cert available
JackDoan
committed
41273a9
fix comment
JackDoan
committed
68bbb53
nit
JackDoan
committed
dc3081e
good idea
JackDoan
committed
888ba40
reduce log spam
JackDoan
committed
26a00a5
we accept mismatched handshakes now, no need to kill now-mismatched tunnels (this is fine as long as we don't let you change your set of vpnNetworks on reload)
JackDoan
committed
32649de
make tryRehandshake easier to understand
JackDoan
committed
1a1255d
fixy fixy
JackDoan
committed
c073eeb
fixy fixy
JackDoan
committed
f488873

Commits on Nov 3, 2025

feedback
JackDoan
committed
dbb0ab5
re-add missing returns, correct a shadowed err in a log line
JackDoan
committed
d2fc7b6