riccardom 3e360ebe0f [client] Drop the unreachable helper timeout from certificate proof collection ...

Both platform collectors wrapped the helper launch in a 30 second deadline, but
the context they wrapped was already capped at 10 seconds by the collector that
calls them, and CollectProofs has no other caller. The inner deadline could
never be reached, so it described a budget the code does not have.

Leave the collector as the single owner of the deadline rather than picking a
smaller inner value: on macOS one budget has to cover the System keychain read
and the helper launch that follows it, and how to divide it is a question about
the budget as a whole, not about the helper alone.

2026-10-02 16:21:04 +02:00

..

acl

[client] Unify peer and route ACL filtering with multi-source rules (#6322)

2026-09-03 10:02:50 +02:00

auth

[management,client] Gate remote jobs behind an admin opt-in with MDM support (#7153)

2026-09-01 17:53:41 +02:00

certproof

[client] Drop the unreachable helper timeout from certificate proof collection

2026-10-02 16:21:04 +02:00

daemonaddr

[client] Ask the OS for privileges when a guarded SSH setting is changed (#7066)

2026-08-25 20:15:16 +02:00

debug

Read the PKCS#11 token PIN from NB_TPM_PIN instead of the profile config

2026-10-01 08:16:40 +02:00

dns

[client] Redirect DNS port 53 with UDP and TCP DNAT instead of the eBPF forwarder (#7439)

2026-09-09 11:32:11 +02:00

dnsfwd

[client] Rebuild the overlay listeners when the TUN is renewed (#7397)

2026-09-03 12:22:00 +02:00

ebpf

[client] Redirect DNS port 53 with UDP and TCP DNAT instead of the eBPF forwarder (#7439)

2026-09-09 11:32:11 +02:00

elevate

[client] Ask the OS for privileges when a guarded SSH setting is changed (#7066)

2026-08-25 20:15:16 +02:00

expose

[client] Add Expose support to embed library (#5695)

2026-03-30 15:53:50 +02:00

getent

[client] Ask the OS for privileges when a guarded SSH setting is changed (#7066)

2026-08-25 20:15:16 +02:00

ingressgw

[client] Unify peer and route ACL filtering with multi-source rules (#6322)

2026-09-03 10:02:50 +02:00

ipcauth

[client] Bind the cached SSH JWT to the local caller that obtained it (#7378)

2026-09-02 14:04:09 +02:00

lazyconn

[client] Reconcile routed allowed IPs when a lazy connection goes idle (#6863)

2026-07-23 18:40:54 +02:00

listener

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

localmetrics

[client] Add local Prometheus metrics endpoint (#6689)

2026-08-27 13:53:06 +02:00

metrics

[client] Clarify that metrics ingest X-Peer-ID is not a credential (#7363)

2026-09-02 12:36:47 +02:00

netflow

[client] fix flaky test around event aggregation (#6710)

2026-07-09 18:17:28 +02:00

networkmonitor

[client] Filter scoped/cloned default routes from BSD network monitor RTM_ADD (#6208)

2026-05-25 18:38:21 +02:00

peer

Read the session deadline under the status read lock (#7550)

2026-09-15 12:05:57 +02:00

peerstore

[client] Reinject captured first packet on lazy connection activation (#6572)

2026-06-30 11:22:25 +02:00

pkcs11

Test the PKCS#11 build against SoftHSM in CI and warn once where the build has no driver

2026-10-02 12:44:17 +02:00

portforward

[client] Move the PCP implementation to the go-nat fork (#7282)

2026-08-21 14:15:10 +02:00

profilemanager

Read the PKCS#11 token PIN from NB_TPM_PIN instead of the profile config

2026-10-01 08:16:40 +02:00

relay

[client, relay] Expose relay transport and connection errors in status and metrics (#6342)

2026-06-17 15:41:48 +02:00

rosenpass

[client,management] sync 0.74.4 changes (#6727)

2026-07-11 11:03:55 +02:00

routemanager

[client] Assign the Android TUN address as a host prefix (#7414)

2026-09-04 15:10:36 +02:00

routeselector

[client] Keep the route selection on an invalid request and apply it on a partial one (#7292)

2026-08-31 18:47:37 +02:00

sleep

[client] Fix staticcheck findings from the updated golangci-lint (#7266)

2026-08-20 16:50:50 +02:00

statemanager

[client] Diagnose empty vs corrupt state (#6816)

2026-07-17 15:31:07 +02:00

stdnet

[client] Use stdnet with a context to avoid DNS deadlocks (#4781)

2025-11-13 20:16:45 +01:00

syncstore

[client] Persist sync response via pluggable store (disk on iOS) (#6331)

2026-06-03 14:18:50 +02:00

templates

Update client login success page (#4797)

2025-11-17 15:28:20 +01:00

tpm

start TPM support

2026-09-16 23:00:44 +02:00

tunnelnotifier

[client] Serialize iOS tunnel reconfiguration callbacks (#6870)

2026-07-28 16:51:01 +02:00

updater

[client] Tolerate a still-locked updater binary when cleaning up after an update (#7286)

2026-08-26 20:03:56 +02:00

winregistry

[client] Clean up match domain reg entries between config changes (#4676)

2025-10-21 18:14:39 +02:00

conn_mgr_test.go

[client, proxy] Remove lazy connection exclusions and run Rosenpass on the embedded proxy (#6763)

2026-08-26 12:43:48 +02:00

conn_mgr.go

[client, proxy] Remove lazy connection exclusions and run Rosenpass on the embedded proxy (#6763)

2026-08-26 12:43:48 +02:00

connect_android_default.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

connect_android_embed.go

[client] Support embed.Client on Android with netstack mode (#5623)

2026-04-01 16:19:34 +02:00

connect_test.go

[client] Pick the probe port from the system in Test_freePort (#7404)

2026-09-03 10:03:24 +02:00

connect.go

Read user certificates only from the session of the active profile's owner

2026-10-02 12:32:27 +02:00

dns_peer_activator_test.go

[client] warm lazy connections from the DNS resolver (#6854)

2026-07-22 18:47:48 +02:00

dns_peer_activator.go

[client] warm lazy connections from the DNS resolver (#6854)

2026-07-22 18:47:48 +02:00

dns_test.go

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

dns.go

[management, client] Add IPv6 overlay support (#5631)

2026-05-07 11:33:37 +02:00

engine_authsession.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

engine_bundle_test.go

[management,client] Gate remote jobs behind an admin opt-in with MDM support (#7153)

2026-09-01 17:53:41 +02:00

engine_certposture_test.go

Collect certificate proofs again when the owner's session changes and report lost proofs

2026-10-02 12:37:51 +02:00

engine_certposture.go

Collect certificate proofs again when the owner's session changes and report lost proofs

2026-10-02 12:37:51 +02:00

engine_generic.go

[client,signal,management] Add browser client support (#4415)

2025-10-01 20:10:11 +02:00

engine_js.go

[client,signal,management] Add browser client support (#4415)

2025-10-01 20:10:11 +02:00

engine_privileged_test.go

[client] Gather fresh system info on every management sync stream connect (#7409)

2026-09-04 15:07:01 +02:00

engine_session_deadline_test.go

[client] Keep session deadline visible across reconnects (#6847)

2026-07-22 15:22:16 +02:00

engine_sessionwatch_js.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

engine_sessionwatch.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

engine_ssh.go

[client] Rebuild the overlay listeners when the TUN is renewed (#7397)

2026-09-03 12:22:00 +02:00

engine_stdnet_android.go

[client] Use stdnet with a context to avoid DNS deadlocks (#4781)

2025-11-13 20:16:45 +01:00

engine_stdnet.go

[client] Use stdnet with a context to avoid DNS deadlocks (#4781)

2025-11-13 20:16:45 +01:00

engine_test.go

Merge remote-tracking branch 'origin/main' into poc/certificate-posture

2026-09-04 19:37:22 +02:00

engine_tunsettings.go

[client, android] Pull fresh TUN settings on Android rebuild (#6991)

2026-08-03 18:23:02 +02:00

engine.go

Collect certificate proofs again when the owner's session changes and report lost proofs

2026-10-02 12:37:51 +02:00

iface_common.go

[client] Reinject captured first packet on lazy connection activation (#6572)

2026-06-30 11:22:25 +02:00

iface_windows.go

Interface code cleaning (#3358)

2025-02-21 10:19:38 +01:00

iface.go

Revert "Revert "[relay] Update GO version and QUIC version (#4736)" (#5055)" (#5071)

2026-01-08 18:58:22 +01:00

message_convert.go

[client] Unify peer and route ACL filtering with multi-source rules (#6322)

2026-09-03 10:02:50 +02:00

mobile_dependency.go

[client] Serialize iOS tunnel reconfiguration callbacks (#6870)

2026-07-28 16:51:01 +02:00

session.go

Send terminal notification on peer session expiry (#1660)

2024-03-08 18:28:13 +01:00

state.go

[management,client] 0.75.0 release with new desktop UI (#6473)

2026-07-06 13:47:16 +02:00

wg_iface_monitor_linux.go

[client] Replace WG interface monitor polling with netlink subscription on Linux (#5857)

2026-05-04 18:49:39 +02:00

wg_iface_monitor_other.go

[client] Replace WG interface monitor polling with netlink subscription on Linux (#5857)

2026-05-04 18:49:39 +02:00

wg_iface_monitor.go

[client] Replace WG interface monitor polling with netlink subscription on Linux (#5857)

2026-05-04 18:49:39 +02:00