f24676ba5a
* lib/tlsutil: Enable TLS 1.3 when available, on test builds (fixes #5065) This enables TLS 1.3 negotiation on Go 1.12 by setting the GODEBUG variable. For now, this just gets enabled on test versions (those with a dash in the version number). Users wishing to enable this on production builds can set GODEBUG manually. The string representation of connections now includes the TLS version and cipher suite. This becomes part of the log output on connections. That is, when talking to an old client: Established secure connection .../TLS1.2-TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 and now potentially: Established secure connection .../TLS1.3-TLS_AES_128_GCM_SHA256 (The cipher suite was there previously in the log output, but not the TLS version.) I also added this info as a new Crypto() method on the connection, and propagate this out to the API and GUI, where it can be seen in the connection address hover (although with bad word wrapping sometimes). * wip * wip |
||
|---|---|---|
| .. | ||
| config.go | ||
| connections_test.go | ||
| debug.go | ||
| deprecated.go | ||
| lan_test.go | ||
| limiter.go | ||
| limiter_test.go | ||
| relay_dial.go | ||
| relay_listen.go | ||
| service.go | ||
| structs.go | ||
| tcp_dial.go | ||
| tcp_listen.go | ||
| util.go | ||