mirror of
https://github.com/tailscale/tailscale.git
synced 2024-11-26 03:25:35 +00:00
04dd6d1dae
control/controlclient: sign RegisterRequest Some customers wish to verify eligibility for devices to join their tailnets using machine identity certificates. TLS client certs could potentially fulfill this role but the initial customer for this feature has technical requirements that prevent their use. Instead, the certificate is loaded from the Windows local machine certificate store and uses its RSA public key to sign the RegisterRequest message. There is room to improve the flexibility of this feature in future and it is currently only tested on Windows (although Darwin theoretically works too), but this offers a reasonable starting place for now. Updates tailscale/coral#6 Signed-off-by: Adrian Dewhurst <adrian@tailscale.com>
276 lines
27 KiB
Plaintext
276 lines
27 KiB
Plaintext
tailscale.com/cmd/tailscaled dependencies: (generated by github.com/tailscale/depaware)
|
|
|
|
W 💣 github.com/alexbrainman/sspi from github.com/alexbrainman/sspi/negotiate
|
|
W 💣 github.com/alexbrainman/sspi/negotiate from tailscale.com/net/tshttpproxy
|
|
L github.com/coreos/go-iptables/iptables from tailscale.com/wgengine/router
|
|
W 💣 github.com/github/certstore from tailscale.com/control/controlclient
|
|
github.com/go-multierror/multierror from tailscale.com/wgengine/router+
|
|
W 💣 github.com/go-ole/go-ole from github.com/go-ole/go-ole/oleutil+
|
|
W 💣 github.com/go-ole/go-ole/oleutil from tailscale.com/wgengine/winnet
|
|
L 💣 github.com/godbus/dbus/v5 from tailscale.com/net/dns
|
|
github.com/google/btree from inet.af/netstack/tcpip/header+
|
|
L github.com/josharian/native from github.com/mdlayher/netlink+
|
|
L 💣 github.com/jsimonetti/rtnetlink from tailscale.com/wgengine/monitor
|
|
L github.com/jsimonetti/rtnetlink/internal/unix from github.com/jsimonetti/rtnetlink
|
|
github.com/klauspost/compress/fse from github.com/klauspost/compress/huff0
|
|
github.com/klauspost/compress/huff0 from github.com/klauspost/compress/zstd
|
|
github.com/klauspost/compress/snappy from github.com/klauspost/compress/zstd
|
|
github.com/klauspost/compress/zstd from tailscale.com/smallzstd
|
|
github.com/klauspost/compress/zstd/internal/xxhash from github.com/klauspost/compress/zstd
|
|
L 💣 github.com/mdlayher/netlink from github.com/jsimonetti/rtnetlink+
|
|
L 💣 github.com/mdlayher/netlink/nlenc from github.com/jsimonetti/rtnetlink+
|
|
L github.com/mdlayher/sdnotify from tailscale.com/util/systemd
|
|
W github.com/pkg/errors from github.com/github/certstore
|
|
💣 github.com/tailscale/wireguard-go/conn from github.com/tailscale/wireguard-go/device+
|
|
💣 github.com/tailscale/wireguard-go/device from tailscale.com/wgengine+
|
|
💣 github.com/tailscale/wireguard-go/ipc from github.com/tailscale/wireguard-go/device
|
|
W 💣 github.com/tailscale/wireguard-go/ipc/winpipe from github.com/tailscale/wireguard-go/ipc
|
|
github.com/tailscale/wireguard-go/ratelimiter from github.com/tailscale/wireguard-go/device
|
|
github.com/tailscale/wireguard-go/replay from github.com/tailscale/wireguard-go/device
|
|
github.com/tailscale/wireguard-go/rwcancel from github.com/tailscale/wireguard-go/device+
|
|
github.com/tailscale/wireguard-go/tai64n from github.com/tailscale/wireguard-go/device+
|
|
💣 github.com/tailscale/wireguard-go/tun from github.com/tailscale/wireguard-go/device+
|
|
W 💣 github.com/tailscale/wireguard-go/tun/wintun from github.com/tailscale/wireguard-go/tun+
|
|
github.com/tcnksm/go-httpstat from tailscale.com/net/netcheck
|
|
💣 go4.org/intern from inet.af/netaddr
|
|
💣 go4.org/mem from tailscale.com/control/controlclient+
|
|
go4.org/unsafe/assume-no-moving-gc from go4.org/intern
|
|
W 💣 golang.zx2c4.com/wireguard/windows/tunnel/winipcfg from tailscale.com/net/interfaces+
|
|
inet.af/netaddr from tailscale.com/control/controlclient+
|
|
💣 inet.af/netstack/gohacks from inet.af/netstack/state/wire+
|
|
inet.af/netstack/linewriter from inet.af/netstack/log
|
|
inet.af/netstack/log from inet.af/netstack/state+
|
|
inet.af/netstack/rand from inet.af/netstack/tcpip/network/hash+
|
|
💣 inet.af/netstack/sleep from inet.af/netstack/tcpip/transport/tcp
|
|
💣 inet.af/netstack/state from inet.af/netstack/tcpip+
|
|
inet.af/netstack/state/wire from inet.af/netstack/state
|
|
💣 inet.af/netstack/sync from inet.af/netstack/linewriter+
|
|
💣 inet.af/netstack/tcpip from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/tcpip/adapters/gonet from tailscale.com/wgengine/netstack
|
|
💣 inet.af/netstack/tcpip/buffer from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/tcpip/hash/jenkins from inet.af/netstack/tcpip/stack+
|
|
inet.af/netstack/tcpip/header from inet.af/netstack/tcpip/header/parse+
|
|
inet.af/netstack/tcpip/header/parse from inet.af/netstack/tcpip/network/ipv4+
|
|
inet.af/netstack/tcpip/link/channel from tailscale.com/wgengine/netstack
|
|
inet.af/netstack/tcpip/network/hash from inet.af/netstack/tcpip/network/ipv4+
|
|
inet.af/netstack/tcpip/network/internal/fragmentation from inet.af/netstack/tcpip/network/ipv4+
|
|
inet.af/netstack/tcpip/network/internal/ip from inet.af/netstack/tcpip/network/ipv4+
|
|
inet.af/netstack/tcpip/network/ipv4 from tailscale.com/wgengine/netstack
|
|
inet.af/netstack/tcpip/network/ipv6 from tailscale.com/wgengine/netstack
|
|
inet.af/netstack/tcpip/ports from inet.af/netstack/tcpip/stack+
|
|
inet.af/netstack/tcpip/seqnum from inet.af/netstack/tcpip/header+
|
|
💣 inet.af/netstack/tcpip/stack from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/tcpip/transport/icmp from tailscale.com/wgengine/netstack
|
|
inet.af/netstack/tcpip/transport/packet from inet.af/netstack/tcpip/transport/raw
|
|
inet.af/netstack/tcpip/transport/raw from inet.af/netstack/tcpip/transport/icmp+
|
|
💣 inet.af/netstack/tcpip/transport/tcp from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/tcpip/transport/tcpconntrack from inet.af/netstack/tcpip/stack
|
|
inet.af/netstack/tcpip/transport/udp from inet.af/netstack/tcpip/adapters/gonet+
|
|
inet.af/netstack/waiter from inet.af/netstack/tcpip+
|
|
inet.af/peercred from tailscale.com/ipn/ipnserver
|
|
rsc.io/goversion/version from tailscale.com/version
|
|
tailscale.com/atomicfile from tailscale.com/ipn+
|
|
tailscale.com/control/controlclient from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/derp from tailscale.com/derp/derphttp+
|
|
tailscale.com/derp/derphttp from tailscale.com/net/netcheck+
|
|
tailscale.com/derp/derpmap from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/disco from tailscale.com/derp+
|
|
tailscale.com/health from tailscale.com/control/controlclient+
|
|
tailscale.com/internal/deepprint from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/ipn from tailscale.com/ipn/ipnserver+
|
|
tailscale.com/ipn/ipnlocal from tailscale.com/ipn/ipnserver+
|
|
tailscale.com/ipn/ipnserver from tailscale.com/cmd/tailscaled
|
|
tailscale.com/ipn/ipnstate from tailscale.com/ipn+
|
|
tailscale.com/ipn/localapi from tailscale.com/ipn/ipnserver
|
|
tailscale.com/ipn/policy from tailscale.com/ipn/ipnlocal
|
|
tailscale.com/log/filelogger from tailscale.com/ipn/ipnserver
|
|
tailscale.com/log/logheap from tailscale.com/control/controlclient
|
|
tailscale.com/logpolicy from tailscale.com/cmd/tailscaled
|
|
tailscale.com/logtail from tailscale.com/logpolicy
|
|
tailscale.com/logtail/backoff from tailscale.com/control/controlclient+
|
|
tailscale.com/logtail/filch from tailscale.com/logpolicy
|
|
tailscale.com/metrics from tailscale.com/derp
|
|
tailscale.com/net/dns from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/net/dnscache from tailscale.com/control/controlclient+
|
|
tailscale.com/net/dnsfallback from tailscale.com/control/controlclient
|
|
tailscale.com/net/flowtrack from tailscale.com/wgengine/filter+
|
|
💣 tailscale.com/net/interfaces from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/net/netcheck from tailscale.com/wgengine/magicsock
|
|
tailscale.com/net/netns from tailscale.com/control/controlclient+
|
|
💣 tailscale.com/net/netstat from tailscale.com/ipn/ipnserver
|
|
tailscale.com/net/packet from tailscale.com/wgengine+
|
|
tailscale.com/net/portmapper from tailscale.com/net/netcheck+
|
|
tailscale.com/net/socks5 from tailscale.com/cmd/tailscaled
|
|
tailscale.com/net/stun from tailscale.com/net/netcheck+
|
|
tailscale.com/net/tlsdial from tailscale.com/control/controlclient+
|
|
tailscale.com/net/tsaddr from tailscale.com/ipn/ipnlocal+
|
|
💣 tailscale.com/net/tshttpproxy from tailscale.com/control/controlclient+
|
|
tailscale.com/paths from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/portlist from tailscale.com/ipn/ipnlocal
|
|
tailscale.com/safesocket from tailscale.com/ipn/ipnserver
|
|
tailscale.com/smallzstd from tailscale.com/ipn/ipnserver+
|
|
tailscale.com/syncs from tailscale.com/net/interfaces+
|
|
tailscale.com/tailcfg from tailscale.com/control/controlclient+
|
|
W 💣 tailscale.com/tempfork/wireguard-windows/firewall from tailscale.com/cmd/tailscaled
|
|
W tailscale.com/tsconst from tailscale.com/net/interfaces
|
|
tailscale.com/tstime from tailscale.com/wgengine/magicsock
|
|
tailscale.com/types/empty from tailscale.com/control/controlclient+
|
|
tailscale.com/types/flagtype from tailscale.com/cmd/tailscaled
|
|
tailscale.com/types/ipproto from tailscale.com/net/flowtrack+
|
|
tailscale.com/types/key from tailscale.com/derp+
|
|
tailscale.com/types/logger from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/types/netmap from tailscale.com/control/controlclient+
|
|
tailscale.com/types/nettype from tailscale.com/wgengine/magicsock
|
|
tailscale.com/types/opt from tailscale.com/control/controlclient+
|
|
tailscale.com/types/pad32 from tailscale.com/wgengine/magicsock
|
|
tailscale.com/types/persist from tailscale.com/control/controlclient+
|
|
tailscale.com/types/preftype from tailscale.com/ipn+
|
|
tailscale.com/types/strbuilder from tailscale.com/net/packet
|
|
tailscale.com/types/structs from tailscale.com/control/controlclient+
|
|
tailscale.com/types/wgkey from tailscale.com/control/controlclient+
|
|
tailscale.com/util/dnsname from tailscale.com/ipn/ipnstate+
|
|
LW tailscale.com/util/endian from tailscale.com/net/netns+
|
|
L tailscale.com/util/lineread from tailscale.com/control/controlclient+
|
|
tailscale.com/util/pidowner from tailscale.com/ipn/ipnserver
|
|
tailscale.com/util/racebuild from tailscale.com/logpolicy
|
|
tailscale.com/util/systemd from tailscale.com/control/controlclient+
|
|
tailscale.com/util/winutil from tailscale.com/logpolicy+
|
|
tailscale.com/version from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/version/distro from tailscale.com/control/controlclient+
|
|
tailscale.com/wgengine from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/wgengine/filter from tailscale.com/control/controlclient+
|
|
tailscale.com/wgengine/magicsock from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/wgengine/monitor from tailscale.com/wgengine+
|
|
tailscale.com/wgengine/netstack from tailscale.com/cmd/tailscaled
|
|
tailscale.com/wgengine/router from tailscale.com/cmd/tailscaled+
|
|
tailscale.com/wgengine/tstun from tailscale.com/wgengine+
|
|
tailscale.com/wgengine/wgcfg from tailscale.com/ipn/ipnlocal+
|
|
tailscale.com/wgengine/wgcfg/nmcfg from tailscale.com/ipn/ipnlocal
|
|
tailscale.com/wgengine/wglog from tailscale.com/wgengine
|
|
W 💣 tailscale.com/wgengine/winnet from tailscale.com/wgengine/router
|
|
golang.org/x/crypto/blake2b from golang.org/x/crypto/nacl/box
|
|
golang.org/x/crypto/blake2s from github.com/tailscale/wireguard-go/device+
|
|
golang.org/x/crypto/chacha20 from golang.org/x/crypto/chacha20poly1305
|
|
golang.org/x/crypto/chacha20poly1305 from crypto/tls+
|
|
golang.org/x/crypto/cryptobyte from crypto/ecdsa+
|
|
golang.org/x/crypto/cryptobyte/asn1 from crypto/ecdsa+
|
|
golang.org/x/crypto/curve25519 from crypto/tls+
|
|
golang.org/x/crypto/hkdf from crypto/tls
|
|
golang.org/x/crypto/nacl/box from tailscale.com/control/controlclient+
|
|
golang.org/x/crypto/nacl/secretbox from golang.org/x/crypto/nacl/box
|
|
golang.org/x/crypto/poly1305 from github.com/tailscale/wireguard-go/device+
|
|
golang.org/x/crypto/salsa20/salsa from golang.org/x/crypto/nacl/box+
|
|
golang.org/x/net/bpf from github.com/mdlayher/netlink+
|
|
golang.org/x/net/dns/dnsmessage from net+
|
|
golang.org/x/net/http/httpguts from net/http
|
|
golang.org/x/net/http/httpproxy from net/http
|
|
golang.org/x/net/http2/hpack from net/http
|
|
golang.org/x/net/idna from golang.org/x/net/http/httpguts+
|
|
golang.org/x/net/ipv4 from github.com/tailscale/wireguard-go/device
|
|
golang.org/x/net/ipv6 from github.com/tailscale/wireguard-go/device+
|
|
golang.org/x/net/proxy from tailscale.com/net/netns
|
|
D golang.org/x/net/route from net+
|
|
golang.org/x/sync/errgroup from tailscale.com/derp
|
|
golang.org/x/sync/singleflight from tailscale.com/net/dnscache
|
|
golang.org/x/sys/cpu from golang.org/x/crypto/blake2b+
|
|
LD golang.org/x/sys/unix from github.com/jsimonetti/rtnetlink/internal/unix+
|
|
W golang.org/x/sys/windows from github.com/tailscale/wireguard-go/conn+
|
|
W golang.org/x/sys/windows/registry from golang.zx2c4.com/wireguard/windows/tunnel/winipcfg+
|
|
W golang.org/x/sys/windows/svc from tailscale.com/cmd/tailscaled
|
|
golang.org/x/term from tailscale.com/logpolicy
|
|
golang.org/x/text/secure/bidirule from golang.org/x/net/idna
|
|
golang.org/x/text/transform from golang.org/x/text/secure/bidirule+
|
|
golang.org/x/text/unicode/bidi from golang.org/x/net/idna+
|
|
golang.org/x/text/unicode/norm from golang.org/x/net/idna
|
|
golang.org/x/time/rate from tailscale.com/types/logger+
|
|
bufio from compress/flate+
|
|
bytes from bufio+
|
|
compress/flate from compress/gzip+
|
|
compress/gzip from internal/profile+
|
|
compress/zlib from debug/elf+
|
|
container/heap from inet.af/netstack/tcpip/transport/tcp
|
|
container/list from crypto/tls+
|
|
context from crypto/tls+
|
|
crypto from crypto/ecdsa+
|
|
crypto/aes from crypto/ecdsa+
|
|
crypto/cipher from crypto/aes+
|
|
crypto/des from crypto/tls+
|
|
crypto/dsa from crypto/x509
|
|
crypto/ecdsa from crypto/tls+
|
|
crypto/ed25519 from crypto/tls+
|
|
crypto/elliptic from crypto/ecdsa+
|
|
crypto/hmac from crypto/tls+
|
|
crypto/md5 from crypto/tls+
|
|
crypto/rand from crypto/ed25519+
|
|
crypto/rc4 from crypto/tls
|
|
crypto/rsa from crypto/tls+
|
|
crypto/sha1 from crypto/tls+
|
|
crypto/sha256 from crypto/tls+
|
|
crypto/sha512 from crypto/ecdsa+
|
|
crypto/subtle from crypto/aes+
|
|
crypto/tls from github.com/tcnksm/go-httpstat+
|
|
crypto/x509 from crypto/tls+
|
|
crypto/x509/pkix from crypto/x509+
|
|
debug/dwarf from debug/elf+
|
|
debug/elf from rsc.io/goversion/version
|
|
debug/macho from rsc.io/goversion/version
|
|
debug/pe from rsc.io/goversion/version
|
|
encoding from encoding/json+
|
|
encoding/asn1 from crypto/x509+
|
|
encoding/base64 from encoding/json+
|
|
encoding/binary from compress/gzip+
|
|
encoding/hex from crypto/x509+
|
|
encoding/json from expvar+
|
|
encoding/pem from crypto/tls+
|
|
errors from bufio+
|
|
expvar from tailscale.com/derp+
|
|
flag from tailscale.com/cmd/tailscaled+
|
|
fmt from compress/flate+
|
|
hash from compress/zlib+
|
|
hash/adler32 from compress/zlib
|
|
hash/crc32 from compress/gzip+
|
|
hash/fnv from tailscale.com/wgengine/magicsock+
|
|
hash/maphash from go4.org/mem
|
|
html from net/http/pprof+
|
|
io from bufio+
|
|
io/fs from crypto/rand+
|
|
io/ioutil from github.com/godbus/dbus/v5+
|
|
log from expvar+
|
|
math from compress/flate+
|
|
math/big from crypto/dsa+
|
|
math/bits from compress/flate+
|
|
math/rand from github.com/mdlayher/netlink+
|
|
mime from mime/multipart+
|
|
mime/multipart from net/http
|
|
mime/quotedprintable from mime/multipart
|
|
net from crypto/tls+
|
|
net/http from expvar+
|
|
net/http/httptrace from github.com/tcnksm/go-httpstat+
|
|
net/http/internal from net/http
|
|
net/http/pprof from tailscale.com/cmd/tailscaled
|
|
net/textproto from golang.org/x/net/http/httpguts+
|
|
net/url from crypto/x509+
|
|
os from crypto/rand+
|
|
os/exec from github.com/coreos/go-iptables/iptables+
|
|
os/signal from tailscale.com/cmd/tailscaled+
|
|
os/user from github.com/godbus/dbus/v5+
|
|
path from debug/dwarf+
|
|
path/filepath from crypto/x509+
|
|
reflect from crypto/x509+
|
|
regexp from github.com/coreos/go-iptables/iptables+
|
|
regexp/syntax from regexp
|
|
runtime/debug from github.com/klauspost/compress/zstd+
|
|
runtime/pprof from net/http/pprof+
|
|
runtime/trace from net/http/pprof
|
|
sort from compress/flate+
|
|
strconv from compress/flate+
|
|
strings from bufio+
|
|
sync from compress/flate+
|
|
sync/atomic from context+
|
|
syscall from crypto/rand+
|
|
text/tabwriter from runtime/pprof
|
|
time from compress/gzip+
|
|
unicode from bytes+
|
|
unicode/utf16 from encoding/asn1+
|
|
unicode/utf8 from bufio+
|