Revert "Introduces a forced WG handshake on initial MLKEM bootstrap."

This reverts commit b5a72eca65.
This commit is contained in:
riccardom
2026-08-27 12:19:34 +02:00
parent 118569878d
commit d4d7441fab
9 changed files with 15 additions and 103 deletions
-8
View File
@@ -680,14 +680,6 @@ func (e *Engine) Start(netbirdConfig *mgmProto.NetbirdConfig, mgmtURL *url.URL)
conn.RequestReoffer()
}
},
// On a freshly bootstrapped PSK, force the peer's WireGuard session to
// re-handshake so it adopts the PSK even if the tunnel already came up on
// a pre-PQ key (KEM-vs-endpoint-config race).
rehandshake: func(remoteKey string) {
if conn, ok := e.peerStore.PeerConn(remoteKey); ok {
conn.ForcePQRehandshake()
}
},
}
e.pqkemManager = pqkem.NewManager(pqkem.LocalID(publicKey.String()), cbHandler, pqkem.NewLogger())
e.pqkemManager.Start(tr)