Mike Jensen 0eb38dc2e5 ipn,magicsock: deny peer capabilities to unsigned peers (#20561) ...

Unsigned peers aren't covered by tailnet lock, so they must never hold peer capabilities even if the packet filter grants them. This change extends the check for unsigned-peers to ensure full coverage in capabilities.

Fixes tailscale/corp#45116

Change-Id: I918af24f0b9855e55921cbdad109cc68e745e125

Signed-off-by: Mike Jensen <mikej@tailscale.com>

2026-07-22 08:27:15 -06:00

..

controlbase

control/controlbase: deflake, speed up TestConnMemoryOverhead

2026-03-06 06:19:11 -08:00

controlclient

ipn,magicsock: deny peer capabilities to unsigned peers (#20561)

2026-07-22 08:27:15 -06:00

controlhttp

net/netutil: add NewDefaultTransport to avoid http.DefaultTransport panics

2026-06-01 12:28:36 -07:00

controlknobs

all: don't repeat the the word "the" unnecessarily

2026-06-18 16:32:08 +01:00

ts2021

tsd, all: add Sys.ExtraRootCAs, plumb through TLS dial paths

2026-04-07 18:10:54 -07:00

tsp

control/tsp, tstest/integration/testcontrol: deflake TestMapAgainstTestControl

2026-04-29 16:11:00 -07:00