The easiest, most secure way to use WireGuard and 2FA.
Go to file
Brad Fitzpatrick 6aab4fb696 cmd/tailscale/cli: start making cert output support pkcs12 (p12) output
If the --key-file output filename ends in ".pfx" or ".p12", use pkcs12
format.

This might not be working entirely correctly yet but might be enough for
others to help out or experiment.

Updates #2928
Updates #5011

Change-Id: I62eb0eeaa293b9fd5e27b97b9bc476c23dd27cf6
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
2022-11-11 07:55:09 -08:00
.bencher bencher: add config to suppress failures on benchmark regressions. 2021-10-01 16:16:02 -07:00
.github Fix vm ci tests clogging in fork repository pull request 2022-11-01 08:43:07 -07:00
atomicfile refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
chirp all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
client/tailscale client/tailscale: remove some json.Unmarshal repetition, add helper 2022-11-10 21:54:56 -08:00
cmd cmd/tailscale/cli: start making cert output support pkcs12 (p12) output 2022-11-11 07:55:09 -08:00
control control/controlclient: make Status.Persist a PersistView 2022-11-11 10:45:47 +05:00
derp all: remove old +build tags 2022-11-04 07:25:42 -07:00
disco all: remove old +build tags 2022-11-04 07:25:42 -07:00
docs docs/k8s: add secrets patching permission to the tailscale role. 2022-11-07 16:18:01 -08:00
doctor doctor: add package for running in-depth healthchecks; use in bugreport (#5413) 2022-09-26 13:07:28 -04:00
envknob ipn/ipnlocal: filter peers with bad signatures when tka is enabled 2022-10-05 10:56:17 -07:00
health tailcfg: add Node.UnsignedPeerAPIOnly to let server mark node as peerapi-only 2022-11-02 21:55:04 -07:00
hostinfo all: remove old +build tags 2022-11-04 07:25:42 -07:00
internal/tooldeps all: remove old +build tags 2022-11-04 07:25:42 -07:00
ipn cmd/tailscale,ipn: minor fixes to tailscale lock commands 2022-11-11 07:48:40 -06:00
jsondb jsondb: small package to load/save JSON DBs. 2022-07-12 11:56:38 -07:00
kube kube: handle 201 as a valid status code. 2022-10-16 14:47:27 -07:00
licenses licenses: update win/apple licenses 2022-11-11 04:20:29 -08:00
log all: remove old +build tags 2022-11-04 07:25:42 -07:00
logpolicy all: fix spelling mistakes 2022-09-29 13:36:13 -07:00
logtail all: remove old +build tags 2022-11-04 07:25:42 -07:00
metrics util/dirwalk, metrics, portlist: add new package for fast directory walking 2022-11-05 16:26:51 -07:00
net net/netcheck: don't use a space in the captive portal challenge 2022-11-08 16:58:54 -05:00
packages/deb refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
paths all: remove old +build tags 2022-11-04 07:25:42 -07:00
portlist util/dirwalk, metrics, portlist: add new package for fast directory walking 2022-11-05 16:26:51 -07:00
prober prober: fix test flake 2022-11-02 09:58:40 -04:00
safesocket all: remove old +build tags 2022-11-04 07:25:42 -07:00
scripts scripts/installer.sh: add Nobara Linux. 2022-11-10 14:25:26 -08:00
smallzstd refactor: move from io/ioutil to io and os packages 2022-09-15 21:45:53 -07:00
ssh/tailssh ipn/ipnlocal: add support for multiple user profiles 2022-11-11 10:45:47 +05:00
syncs syncs: add Map (#6260) 2022-11-10 10:55:26 -08:00
tailcfg ipn/ipnlocal, tailcfg: wire up ingress peerapi 2022-11-10 09:48:10 -08:00
tempfork all: remove old +build tags 2022-11-04 07:25:42 -07:00
tka cmd/tailscale,ipn: minor fixes to tailscale lock commands 2022-11-11 07:48:40 -06:00
tool cmd/tsconnect: run wasm-opt on the generated wasm file 2022-10-25 13:16:37 -07:00
tsconst net/interfaces/windows: update Tailscale interface detection logic to 2021-11-08 07:44:33 -08:00
tsnet ipn/ipnlocal: add support for multiple user profiles 2022-11-11 10:45:47 +05:00
tstest ipn/ipnlocal: add support for multiple user profiles 2022-11-11 10:45:47 +05:00
tstime all: remove old +build tags 2022-11-04 07:25:42 -07:00
tsweb tsweb: sort top-level expvars after removing type prefixes 2022-10-10 20:28:44 -07:00
types cmd/tailscale,ipn: minor fixes to tailscale lock commands 2022-11-11 07:48:40 -06:00
util util/endian: add support on Loongnix-Server (loong64) 2022-11-08 08:24:15 -08:00
version all: remove old +build tags 2022-11-04 07:25:42 -07:00
wf all: remove old +build tags 2022-11-04 07:25:42 -07:00
wgengine wgengine/router: [bsd/darwin] remove and readd routes on profile change 2022-11-11 19:49:01 +05:00
words words: even the odds with something that reminds you of vacation (#6025) 2022-10-22 14:43:57 -07:00
.gitattributes .: add .gitattributes entry to use Go hunk-header driver 2021-12-03 17:56:02 -08:00
.gitignore repo: add .vscode/ to .gitignore (#6278) 2022-11-11 00:10:47 -05:00
ALPINE.txt Docker: add ALPINE.txt to manage alpine versions 2022-06-29 11:47:09 -07:00
api.md api.md: make it clearer where to get the tailnet name in API calls 2022-11-07 16:33:19 -08:00
AUTHORS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
build_dist.sh cmd/tailscaled, net/tstun: add build tags to omit BIRD and TAP 2022-11-07 11:13:14 -05:00
build_docker.sh cmd/containerboot: PID1 for running tailscaled in a container. 2022-11-03 15:30:32 -07:00
CODE_OF_CONDUCT.md Add a code of conduct. 2020-02-10 22:16:30 -08:00
Dockerfile cmd/containerboot: PID1 for running tailscaled in a container. 2022-11-03 15:30:32 -07:00
Dockerfile.base Dockerfile: bump alpine to 3.16 2022-06-29 10:29:37 -07:00
go.mod cmd/tailscale/cli: start making cert output support pkcs12 (p12) output 2022-11-11 07:55:09 -08:00
go.sum cmd/tailscale/cli: start making cert output support pkcs12 (p12) output 2022-11-11 07:55:09 -08:00
go.toolchain.branch go.toolchain.rev: switch to Go 1.19rc2+ 2022-07-28 11:28:21 -07:00
go.toolchain.rev go.toolchain.rev: update to Go 1.19.2 2022-10-05 11:22:00 -07:00
LICENSE LICENSE: Reformat for Github 2021-01-24 16:20:22 -08:00
Makefile Makefile: add publishdevimage target 2022-10-21 10:19:06 -07:00
PATENTS Move Linux client & common packages into a public repo. 2020-02-09 09:32:57 -08:00
pull-toolchain.sh go.toolchain.rev: add update script 2022-01-10 14:55:04 -08:00
README.md all: require Go 1.19 2022-08-02 11:49:01 -07:00
SECURITY.md Add a SECURITY.md for vulnerability reports. 2020-02-11 10:26:41 -08:00
shell.nix shell.nix: add graphviz 2022-10-25 13:03:31 -04:00
staticcheck.conf staticcheck.conf: remove unnecessary warning 2021-06-22 12:26:13 -07:00
version_test.go Dockerfile: add test that build-env Alpine version matches go.mod 2022-09-16 12:19:09 -07:00
version-embed.go Docker: add ALPINE.txt to manage alpine versions 2022-06-29 11:47:09 -07:00
VERSION.txt VERSION.txt: this is 1.33. 2022-10-12 09:53:06 -07:00

Tailscale

https://tailscale.com

Private WireGuard® networks made easy

Overview

This repository contains all the open source Tailscale client code and the tailscaled daemon and tailscale CLI tool. The tailscaled daemon runs on Linux, Windows and macOS, and to varying degrees on FreeBSD, OpenBSD, and Darwin. (The Tailscale iOS and Android apps use this repo's code, but this repo doesn't contain the mobile GUI code.)

The Android app is at https://github.com/tailscale/tailscale-android

The Synology package is at https://github.com/tailscale/tailscale-synology

Using

We serve packages for a variety of distros at https://pkgs.tailscale.com .

Other clients

The macOS, iOS, and Windows clients use the code in this repository but additionally include small GUI wrappers that are not open source.

Building

go install tailscale.com/cmd/tailscale{,d}

If you're packaging Tailscale for distribution, use build_dist.sh instead, to burn commit IDs and version info into the binaries:

./build_dist.sh tailscale.com/cmd/tailscale
./build_dist.sh tailscale.com/cmd/tailscaled

If your distro has conventions that preclude the use of build_dist.sh, please do the equivalent of what it does in your distro's way, so that bug reports contain useful version information.

We require the latest Go release, currently Go 1.19.

Bugs

Please file any issues about this code or the hosted service on the issue tracker.

Contributing

PRs welcome! But please file bugs. Commit messages should reference bugs.

We require Developer Certificate of Origin Signed-off-by lines in commits.

About Us

Tailscale is primarily developed by the people at https://github.com/orgs/tailscale/people. For other contributors, see:

WireGuard is a registered trademark of Jason A. Donenfeld.