1.10.3 (#1875 )

Version bumps and other release stuff to ship 1.10.3
Add date to release notes
2026-09-22 15:29:03 -07:00 · 2023-02-15 14:04:42 -05:00 · 2023-02-15 14:04:02 -05:00 · 2023-02-15 14:03:13 -05:00 · 2023-02-06 11:50:05 -08:00 · 2023-02-06 10:52:52 -08:00
1761 changed files with 867804 additions and 236595 deletions
@@ -1,50 +1,7 @@
+local registry = "084037375216.dkr.ecr.us-east-2.amazonaws.com";

 local targets = [
-      //
-      // Render these into .drone.yaml by running "make drone"
-      //
-      { "os": "linux", "name": "el9", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "el8", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "el7", "isas": [ "amd64", "ppc64le"], "events": [ "tag" ] },
-      { "os": "linux", "name": "el6", "isas": [ "amd64" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "amzn2", "isas": [ "amd64", "arm64" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "fc37", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "fc36", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "fc35", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "jammy", "isas": [ "amd64", "arm64", "armv7", "riscv64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "focal", "isas": [ "amd64", "arm64", "armv7", "riscv64", "ppc64le"  ], "events": [ "tag" ] },
-      { "os": "linux", "name": "bionic", "isas": [ "amd64", "arm64", "386", "ppc64le", "s390x" ], "events": ["tag" ] },
-      { "os": "linux", "name": "xenial", "isas": [ "amd64", "arm64", "386" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "sid", "isas": [ "386", "amd64", "arm64",  "riscv64", "mips64le", "ppc64le", "s390x" ], "events":   [ "push", "tag" ] },
-      { "os": "linux", "name": "bookworm", "isas": [ "amd64", "arm64", "armv7", "386", "mips64le", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "bullseye", "isas": [ "amd64", "arm64", "armv7", "386", "mips64le", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "buster", "isas": [ "amd64", "arm64", "armv7", "386", "mips64le", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "stretch", "isas": [ "amd64", "arm64", "386" ], "events": [ "tag" ] },
-      // { "os": "windows", "name": "win2k19", "isas": [ "amd64" ], "events": ["push", "tag" ] }
-];
-
-local master_targets = [
-      //
-      // Render these into .drone.yaml by running "make drone"
-      //      
-      { "os": "linux", "name": "el9", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "el8", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "el7", "isas": [ "amd64", "ppc64le"], "events": [ "tag" ] },
-      { "os": "linux", "name": "el6", "isas": [ "amd64" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "amzn2", "isas": [ "amd64", "arm64" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "fc37", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "fc36", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "fc35", "isas": [ "amd64", "arm64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "jammy", "isas": [ "amd64", "arm64", "armv7", "riscv64", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "focal", "isas": [ "amd64", "arm64", "armv7", "riscv64", "ppc64le"  ], "events": [ "tag" ] },
-      { "os": "linux", "name": "bionic", "isas": [ "amd64", "arm64", "386", "ppc64le", "s390x" ], "events": ["tag" ] },
-      { "os": "linux", "name": "xenial", "isas": [ "amd64", "arm64", "386" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "sid", "isas": [ "386", "amd64", "arm64",  "riscv64", "mips64le", "ppc64le", "s390x" ], "events": [ "push", "tag" ] },
-      { "os": "linux", "name": "bookworm", "isas": [ "amd64", "arm64", "armv7", "386", "mips64le", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "bullseye", "isas": [ "amd64", "arm64", "armv7", "386", "mips64le", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "buster", "isas": [ "amd64", "arm64", "armv7", "386", "mips64le", "ppc64le", "s390x" ], "events": [ "tag" ] },
-      { "os": "linux", "name": "stretch", "isas": [ "amd64", "arm64", "386" ], "events": [ "tag" ] },
-      // { "os": "windows", "name": "win2k19", "isas": [ "amd64" ], "events": ["push", "tag" ] }
+      { "os": "linux",   "name": "sid", "isas": [ "386", "armv7", "amd64", "arm64", "mips64le", "ppc64le", "s390x", "riscv64" ], "events": [ "push", "tag", "custom" ] },
 ];

 local Build(platform, os, isa, events) = {
@@ -56,27 +13,18 @@ local Build(platform, os, isa, events) = {
  "steps": [
    {
      "name": "build",
-      "image": "registry.sean.farm/honda-builder",
-      "commands": [ "./ci/scripts/build.sh " + platform + " " + isa + " " + "100.0.0+${DRONE_COMMIT_SHA:0:8}" + " " + "${DRONE_BUILD_EVENT}" ]
-    },
-    {
-      "name": "list",
-      "image": "registry.sean.farm/honda-builder",
-      "commands": [ "ls -la " + platform ]
+      "image": registry + "/honda-builder",
+      "commands": [
+        "aws ecr get-login-password --region us-east-2 | docker login --username AWS --password-stdin " + registry,
+        "./ci/scripts/build.sh " + platform + " " + isa + " " + "100.0.0+${DRONE_COMMIT_SHA:0:8}" + " " + "${DRONE_BUILD_EVENT}"
+      ]
    },
    // {
-    //   "name": "notify-mattermost",
-    //   "image": "registry.sean.farm/mattermost-notify",
-    //   "environment": {
-    //     "token": { "from_secret": "mattermost-token" },
-    //     "host": { "from_secret": "mattermost-host" },
-    //     "channel": { "from_secret": "mattermost-channel" },
-    //     "maxRetry": 3,
-    //   },
-    //   "when": { "status": [ "failure" ] }
-    // }
+    //   "name": "list",
+    //   "image": registry + "/honda-builder",
+    //   "commands": [ "ls -la " + platform ]
+    // },
  ],  
-  "image_pull_secrets": [ "dockerconfigjson" ],
  [ if isa == "arm64" || isa == "armv7" then "platform" ]: { os: os, arch: "arm64" },
  "trigger": { "event": events }
 };
@@ -0,0 +1,107 @@
+on: [ push ]
+
+jobs:
+  build_ubuntu:
+    runs-on: ubuntu-latest
+    steps:
+    - name: gitconfig
+      run: |
+        git config --global core.autocrlf false
+        git config --global core.eol lf
+    - name: checkout
+      uses: actions/checkout@v3
+    - name: Install Rust
+      uses: actions-rs/toolchain@v1
+      with:
+        toolchain: stable
+        target: aarch64-apple-darwin
+        override: true
+        components: rustfmt, clippy
+
+    - name: Set up cargo cache
+      uses: actions/cache@v3
+      continue-on-error: false
+      with:
+        path: |
+          ~/.cargo/bin/
+          ~/.cargo/registry/index/
+          ~/.cargo/registry/cache/
+          ~/.cargo/git/db/
+          target/
+        key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+        restore-keys: ${{ runner.os }}-cargo-
+    - name: make
+      run: make
+    - name: selftest
+      run: |
+        make selftest
+        ./zerotier-selftest
+
+  build_macos:
+    runs-on: macos-latest
+    steps:
+    - name: gitconfig
+      run: |
+        git config --global core.autocrlf false
+        git config --global core.eol lf
+    - name: checkout
+      uses: actions/checkout@v3
+    - name: Install Rust
+      uses: actions-rs/toolchain@v1
+      with:
+        toolchain: stable
+        target: aarch64-apple-darwin
+        override: true
+        components: rustfmt, clippy
+    - name: Set up cargo cache
+      uses: actions/cache@v3
+      continue-on-error: false
+      with:
+        path: |
+          ~/.cargo/bin/
+          ~/.cargo/registry/index/
+          ~/.cargo/registry/cache/
+          ~/.cargo/git/db/
+          target/
+        key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+        restore-keys: ${{ runner.os }}-cargo-
+    - name: make
+      run: make
+    - name: selftest
+      run: |
+        make selftest
+        ./zerotier-selftest
+
+  build_windows:
+    runs-on: windows-latest
+    steps:
+    - name: gitconfig
+      run: |
+        git config --global core.autocrlf false
+        git config --global core.eol lf
+    - name: checkout
+      uses: actions/checkout@v3
+    - name: Install Rust
+      uses: actions-rs/toolchain@v1
+      with:
+        toolchain: stable
+        target: aarch64-apple-darwin
+        override: true
+        components: rustfmt, clippy
+    - name: Set up cargo cache
+      uses: actions/cache@v3
+      continue-on-error: false
+      with:
+        path: |
+          ~/.cargo/bin/
+          ~/.cargo/registry/index/
+          ~/.cargo/registry/cache/
+          ~/.cargo/git/db/
+          target/
+        key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
+        restore-keys: ${{ runner.os }}-cargo-
+    - name: setup msbuild
+      uses: microsoft/setup-msbuild@v1.1.3
+    - name: msbuild
+      run: |
+        msbuild windows\ZeroTierOne.sln /m /p:Configuration=Release  /property:Platform=x64 /t:ZeroTierOne:Rebuild        
@@ -136,4 +136,5 @@ zeroidc/target/
 __pycache__
 *.pyc
 *_source.tar.bz2
-snap/.snapcraft
+snap/.snapcraft
+tcp-proxy/tcp-proxy
@@ -1,6 +1,18 @@
 ZeroTier Release Notes
 ======

+# 2023-02-15 -- Version 1.10.3
+
+ * Fix for duplicate paths in client. Could cause connectivity issues. Affects all platforms.
+ * Fix for Ethernet Tap MTU setting, would not properly apply on Linux.
+ * Fix default route bugs (macOS.)
+ * Enable Ping automatically for ZeroTier Adapters (Windows.)
+ * SSO updates and minor bugfixes.
+ * Add low-bandwidth mode.
+ * Add forceTcpRelay mode (optionally enabled.)
+ * Fix bug that prevented setting of custom TCP relay address.
+ * Build script improvements and bug fixes.
+
 # 2022-11-01 -- Version 1.10.2

 * Fix another SSO "stuck client" issue in zeroidc.
@@ -32,7 +44,7 @@ Note that releases are coming few and far between because most of our dev effort

 # 2022-04-25 -- Version 1.8.9

- * Fixed a long-standing and strange bug that was causing sporadic "phantom" packet authentication failures. Not a security problem but could be behind spordaic reports of link failures under some conditions.
+ * Fixed a long-standing and strange bug that was causing sporadic "phantom" packet authentication failures. Not a security problem but could be behind sporadic reports of link failures under some conditions.
 * Fized a memory leak in SSO/OIDC support.
 * Fixed SSO/OIDC display error on CLI.
 * Fixed a bug causing nodes to sometimes fail to push certs to each other (primarily affects SSO/OIDC use cases).
@@ -1,5 +1,5 @@
 ARG PLATFORM
-FROM registry.sean.farm/${PLATFORM}-builder as stage
+FROM 084037375216.dkr.ecr.us-east-2.amazonaws.com/${PLATFORM}-builder as stage
 WORKDIR /work/build
 COPY . .
 RUN make debian
@@ -0,0 +1,5 @@
+ARG PLATFORM
+FROM 084037375216.dkr.ecr.us-east-2.amazonaws.com/${PLATFORM}-builder as stage
+WORKDIR /work
+COPY . .
+RUN make
@@ -1,5 +1,5 @@
 ARG PLATFORM
-FROM registry.sean.farm/${PLATFORM}-builder as stage
+FROM 084037375216.dkr.ecr.us-east-2.amazonaws.com/${PLATFORM}-builder as stage
 WORKDIR /root/rpmbuild/BUILD
 COPY . .
 RUN make redhat
@@ -8,6 +8,9 @@ export VERSION=$3
 export EVENT=$4

 case $PLATFORM in
+    sid)
+        export PKGFMT=none
+        ;;
    el*|fc*|amzn*)
        export PKGFMT=rpm
        ;;
@@ -15,22 +18,21 @@ case $PLATFORM in
        export PKGFMT=deb
 esac

-# OSX
-# x86_64-apple-darwin
-# aarch64-apple-darwin
+#
+# Allow user to drop in custom Dockerfile for PLATFORM
+#

-# Windows
-# x86_64-pc-windows-msvc
-# i686-pc-windows-msvc
-# aarch64-pc-windows-msvc
+if [ -f "ci/Dockerfile.${PLATFORM}" ]; then
+    export DOCKERFILE="ci/Dockerfile.${PLATFORM}"
+else
+    export DOCKERFILE="ci/Dockerfile.${PKGFMT}"
+fi

-# Linux
-# i686-unknown-linux-gnu
-# x86_64-unknown-linux-gnu
-# arm-unknown-linux-gnueabi       ?
-# arm-unknown-linux-gnueabihf     ?
-# armv7-unknown-linux-gnueabihf
-# 
+#
+# Rust sometimes gets confused about where it's running.
+# Normally, the build images will have Rust pre-baked.
+# Pass RUST_TRIPLET for convenience when using a custom Dockerfile
+#

 case $ZT_ISA in
    386)
@@ -41,13 +43,9 @@ case $ZT_ISA in
        export DOCKER_ARCH=amd64
        export RUST_TRIPLET=x86_64-unknown-linux-gnu
        ;;
-    armv6)
-        export DOCKER_ARCH=arm/v6
-        export RUST_TRIPLET=arm-unknown-linux-gnueabi
-        ;;
-    armv7)        
+    armv7)
        export DOCKER_ARCH=arm/v7
-        export RUST_TRIPLET=arm-unknown-linux-gnueabihf
+        export RUST_TRIPLET=armv7-unknown-linux-gnueabihf
        ;;
    arm64)
        export DOCKER_ARCH=arm64/v8
@@ -60,7 +58,7 @@ case $ZT_ISA in
    ppc64le)
        export DOCKER_ARCH=ppc64le
        export RUST_TRIPLET=powerpc64le-unknown-linux-gnu
-        ;;    
+        ;;
    mips64le)
        export DOCKER_ARCH=mips64le
        export RUST_TRIPLET=mips64el-unknown-linux-gnuabi64
@@ -69,17 +67,15 @@ case $ZT_ISA in
        export DOCKER_ARCH=s390x
        export RUST_TRIPLET=s390x-unknown-linux-gnu
        ;;
-    *)        
+    *)
        echo "ERROR: could not determine architecture settings. PLEASE FIX ME"
        exit 1
        ;;
 esac

-if [ -f "ci/Dockerfile.${PLATFORM}" ]; then
-    export DOCKERFILE="ci/Dockerfile.${PLATFORM}"
-else
-    export DOCKERFILE="ci/Dockerfile.${PKGFMT}"
-fi
+#
+# Print debug info
+#

 echo "#~~~~~~~~~~~~~~~~~~~~"
 echo "$0 variables:"
@@ -94,23 +90,37 @@ echo "PWD: ${PWD}"
 echo "DOCKERFILE: ${DOCKERFILE}"
 echo "#~~~~~~~~~~~~~~~~~~~~"

-if [ ${EVENT} == "push" ]; then
-make munge_rpm zerotier-one.spec VERSION=${VERSION}
-make munge_deb debian/changelog VERSION=${VERSION}
+#
+# Munge RPM and Deb
+#
+
+if [ ${PKGFMT} != "none" ] && [ ${EVENT} != "tag" ]; then
+    make munge_rpm zerotier-one.spec VERSION=${VERSION}
+    make munge_deb debian/changelog VERSION=${VERSION}
 fi

-export DOCKER_BUILDKIT=1
-docker run --privileged --rm tonistiigi/binfmt --install all
+#
+# Assemble buildx arguments
+#

-# docker pull --platform linux/${DOCKER_ARCH} registry.sean.farm/${PLATFORM}-builder
+build_args=(
+    --no-cache
+    --build-arg PLATFORM=${PLATFORM}
+    --build-arg RUST_TRIPLET=${RUST_TRIPLET}
+    --build-arg DOCKER_ARCH=${DOCKER_ARCH}
+    --platform linux/${DOCKER_ARCH}
+    -f ${DOCKERFILE}
+    -t build
+    .
+)

-docker buildx build \
-       --build-arg PLATFORM="${PLATFORM}" \
-       --build-arg RUST_TRIPLET="${RUST_TRIPLET}" \
-       --build-arg DOCKER_ARCH="${DOCKER_ARCH}" \
-       --platform linux/${DOCKER_ARCH} \
-       -f ${DOCKERFILE} \
-       -t build \
-       . \
-       --output type=local,dest=. \
-       --target export
+if [ ${PKGFMT} != "none" ]; then
+    build_args+=("--output type=local,dest=.")
+    build_args+=("--target export")
+fi
+
+#
+# Do build
+#
+
+docker buildx build ${build_args[@]}
@@ -53,6 +53,7 @@ public:
 	, ssoNonce()
 	, ssoState()
 	, ssoClientID()
+	, ssoProvider("default")
 	{}

 	bool enabled;
@@ -64,6 +65,7 @@ public:
 	std::string ssoNonce;
 	std::string ssoState;
 	std::string ssoClientID;
+	std::string ssoProvider;
 };

 /**
@@ -34,7 +34,7 @@ using json = nlohmann::json;

 namespace {

-static const int DB_MINIMUM_VERSION = 20;
+static const int DB_MINIMUM_VERSION = 38;

 static const char *_timestr()
 {
@@ -113,7 +113,7 @@ MemberNotificationReceiver::MemberNotificationReceiver(PostgreSQL *p, pqxx::conn
 	: pqxx::notification_receiver(c, channel)
 	, _psql(p)
 {
-	fprintf(stderr, "initialize MemberNotificaitonReceiver\n");
+	fprintf(stderr, "initialize MemberNotificationReceiver\n");
 }
 	

@@ -140,7 +140,7 @@ NetworkNotificationReceiver::NetworkNotificationReceiver(PostgreSQL *p, pqxx::co
 }

 void NetworkNotificationReceiver::operator() (const std::string &payload, int packend_pid) {
-	fprintf(stderr, "Network Notificaiton received: %s\n", payload.c_str());
+	fprintf(stderr, "Network Notification received: %s\n", payload.c_str());
 	json tmp(json::parse(payload));
 	json &ov = tmp["old_val"];
 	json &nv = tmp["new_val"];
@@ -185,7 +185,7 @@ PostgreSQL::PostgreSQL(const Identity &myId, const char *path, int listenPort, R
 	fprintf(stderr, "ZT_SSO_PSK: %s\n", ssoPskHex);
 #endif
 	if (ssoPskHex) {
-		// SECURITY: note that ssoPskHex will always be null-terminated if libc acatually
+		// SECURITY: note that ssoPskHex will always be null-terminated if libc actually
 		// returns something non-NULL. If the hex encodes something shorter than 48 bytes,
 		// it will be padded at the end with zeroes. If longer, it'll be truncated.
 		Utils::unhex(ssoPskHex, _ssoPsk, sizeof(_ssoPsk));
@@ -442,20 +442,29 @@ AuthInfo PostgreSQL::getSSOAuthInfo(const nlohmann::json &member, const std::str
 				exit(7);
 			}

-			r = w.exec_params("SELECT org.client_id, org.authorization_endpoint, org.issuer, org.sso_impl_version "
-				"FROM ztc_network AS nw, ztc_org AS org "
-				"WHERE nw.id = $1 AND nw.sso_enabled = true AND org.owner_id = nw.owner_id", networkId);
+			r = w.exec_params(
+				"SELECT oc.client_id, oc.authorization_endpoint, oc.issuer, oc.provider, oc.sso_impl_version "
+				"FROM ztc_network AS n "
+				"INNER JOIN ztc_org o "
+				"  ON o.owner_id = n.owner_id "
+			    "LEFT OUTER JOIN ztc_network_oidc_config noc "
+				"  ON noc.network_id = n.id "
+				"LEFT OUTER JOIN ztc_oidc_config oc "
+				"  ON noc.client_id = oc.client_id AND noc.org_id = o.org_id "
+				"WHERE n.id = $1 AND n.sso_enabled = true", networkId);
 		
 			std::string client_id = "";
 			std::string authorization_endpoint = "";
 			std::string issuer = "";
+			std::string provider = "";
 			uint64_t sso_version = 0;

 			if (r.size() == 1) {
 				client_id = r.at(0)[0].as<std::string>();
 				authorization_endpoint = r.at(0)[1].as<std::string>();
 				issuer = r.at(0)[2].as<std::string>();
-				sso_version = r.at(0)[3].as<uint64_t>();
+				provider = r.at(0)[3].as<std::string>();
+				sso_version = r.at(0)[4].as<uint64_t>();
 			} else if (r.size() > 1) {
 				fprintf(stderr, "ERROR: More than one auth endpoint for an organization?!?!? NetworkID: %s\n", networkId.c_str());
 			} else {
@@ -485,18 +494,20 @@ AuthInfo PostgreSQL::getSSOAuthInfo(const nlohmann::json &member, const std::str
 				} else if (info.version == 1) {
 					info.ssoClientID = client_id;
 					info.issuerURL = issuer;
+					info.ssoProvider = provider;
 					info.ssoNonce = nonce;
 					info.ssoState = std::string(state_hex) + "_" +networkId;
 					info.centralAuthURL = redirectURL;
 #ifdef ZT_DEBUG
 					fprintf(
 						stderr,
-						"ssoClientID: %s\nissuerURL: %s\nssoNonce: %s\nssoState: %s\ncentralAuthURL: %s\n",
+						"ssoClientID: %s\nissuerURL: %s\nssoNonce: %s\nssoState: %s\ncentralAuthURL: %s\nprovider: %s\n",
 						info.ssoClientID.c_str(),
 						info.issuerURL.c_str(),
 						info.ssoNonce.c_str(),
 						info.ssoState.c_str(),
-						info.centralAuthURL.c_str());
+						info.centralAuthURL.c_str(),
+						provider.c_str());
 #endif
 				}
 			}  else {
@@ -535,15 +546,21 @@ void PostgreSQL::initializeNetworks()
 		std::unordered_set<std::string> networkSet;

 		char qbuf[2048] = {0};
-		sprintf(qbuf, "SELECT n.id, (EXTRACT(EPOCH FROM n.creation_time AT TIME ZONE 'UTC')*1000)::bigint as creation_time, n.capabilities, "
+		sprintf(qbuf,
+			"SELECT n.id, (EXTRACT(EPOCH FROM n.creation_time AT TIME ZONE 'UTC')*1000)::bigint as creation_time, n.capabilities, "
 			"n.enable_broadcast, (EXTRACT(EPOCH FROM n.last_modified AT TIME ZONE 'UTC')*1000)::bigint AS last_modified, n.mtu, n.multicast_limit, n.name, n.private, n.remote_trace_level, "
-			"n.remote_trace_target, n.revision, n.rules, n.tags, n.v4_assign_mode, n.v6_assign_mode, n.sso_enabled, (CASE WHEN n.sso_enabled THEN o.client_id ELSE NULL END) as client_id, "
-			"(CASE WHEN n.sso_enabled THEN o.authorization_endpoint ELSE NULL END) as authorization_endpoint, d.domain, d.servers, "
+			"n.remote_trace_target, n.revision, n.rules, n.tags, n.v4_assign_mode, n.v6_assign_mode, n.sso_enabled, (CASE WHEN n.sso_enabled THEN noc.client_id ELSE NULL END) as client_id, "
+			"(CASE WHEN n.sso_enabled THEN oc.authorization_endpoint ELSE NULL END) as authorization_endpoint, "
+			"(CASE WHEN n.sso_enabled THEN oc.provider ELSE NULL END) as provider, d.domain, d.servers, "
 			"ARRAY(SELECT CONCAT(host(ip_range_start),'|', host(ip_range_end)) FROM ztc_network_assignment_pool WHERE network_id = n.id) AS assignment_pool, "
 			"ARRAY(SELECT CONCAT(host(address),'/',bits::text,'|',COALESCE(host(via), 'NULL'))FROM ztc_network_route WHERE network_id = n.id) AS routes "
 			"FROM ztc_network n "
 			"LEFT OUTER JOIN ztc_org o "
-			"	ON o.owner_id = n.owner_id "
+			" ON o.owner_id = n.owner_id "
+			"LEFT OUTER JOIN ztc_network_oidc_config noc "
+			"	ON noc.network_id = n.id "
+			"LEFT OUTER JOIN ztc_oidc_config oc "
+			"	ON noc.client_id = oc.client_id AND oc.org_id = o.org_id "
 			"LEFT OUTER JOIN ztc_network_dns d "
 			"	ON d.network_id = n.id "
 			"WHERE deleted = false AND controller_id = '%s'", _myAddressStr.c_str());
@@ -574,6 +591,7 @@ void PostgreSQL::initializeNetworks()
 			, std::optional<bool>			// ssoEnabled
 			, std::optional<std::string>	// clientId
 			, std::optional<std::string>	// authorizationEndpoint
+			, std::optional<std::string>    // ssoProvider
 			, std::optional<std::string>	// domain
 			, std::optional<std::string>	// servers
 			, std::string					// assignmentPoolString
@@ -610,10 +628,11 @@ void PostgreSQL::initializeNetworks()
 			std::optional<bool> ssoEnabled = std::get<16>(row);
 			std::optional<std::string> clientId = std::get<17>(row);
 			std::optional<std::string> authorizationEndpoint = std::get<18>(row);
-			std::optional<std::string> dnsDomain = std::get<19>(row);
-			std::optional<std::string> dnsServers = std::get<20>(row);
-			std::string assignmentPoolString = std::get<21>(row);
-			std::string routesString = std::get<22>(row);
+			std::optional<std::string> ssoProvider = std::get<19>(row);
+			std::optional<std::string> dnsDomain = std::get<20>(row);
+			std::optional<std::string> dnsServers = std::get<21>(row);
+			std::string assignmentPoolString = std::get<22>(row);
+			std::string routesString = std::get<23>(row);
 			
 		 	config["id"] = nwid;
 		 	config["nwid"] = nwid;
@@ -638,6 +657,7 @@ void PostgreSQL::initializeNetworks()
 		 	config["routes"] = json::array();
 			config["clientId"] = clientId.value_or("");
 			config["authorizationEndpoint"] = authorizationEndpoint.value_or("");
+			config["provider"] = ssoProvider.value_or("");

 			networkSet.insert(nwid);

@@ -1387,7 +1407,7 @@ void PostgreSQL::commitThread()
 						"sso_enabled = EXCLUDED.sso_enabled",
 						id,
 						_myAddressStr,
-						OSUtils::jsonDump(config["capabilitles"], -1),
+						OSUtils::jsonDump(config["capabilities"], -1),
 						(bool)config["enableBroadcast"],
 						OSUtils::now(),
 						(int)config["mtu"],
@@ -1586,7 +1606,7 @@ void PostgreSQL::onlineNotificationThread()
 /**
 * ONLY UNCOMMENT FOR TEMPORARY DB MAINTENANCE
 *
- * This define temproarly turns off writing to the member status table
+ * This define temporarily turns off writing to the member status table
 * so it can be reindexed when the indexes get too large.
 */

@@ -246,7 +246,7 @@ This returns a JSON object containing all member IDs as keys and their `memberRe
 | vMajor                | integer       | Most recently known major version                 | no       |
 | vMinor                | integer       | Most recently known minor version                 | no       |
 | vRev                  | integer       | Most recently known revision                      | no       |
-| vProto                | integer       | Most recently known protocl version               | no       |
+| vProto                | integer       | Most recently known protocol version               | no       |

 Note that managed IP assignments are only used if they fall within a managed route. Otherwise they are ignored.

@@ -1,3 +1,9 @@
+zerotier-one (1.10.3) unstable; urgency=medium
+
+  * See RELEASE-NOTES.md for release notes.
+
+ -- Adam Ierymenko <adam.ierymenko@zerotier.com>  Sat, 21 Jan 2023 01:00:00 -0700
+
 zerotier-one (1.10.2) unstable; urgency=medium

  * See RELEASE-NOTES.md for release notes.
@@ -81,7 +81,7 @@ These are found in the service's working directory.
   If the ZeroTier One service is built with the network controller enabled, it periodically backs up its controller.db database in this file (currently every 5 minutes if there have been changes). Since this file is not a currently in use SQLite3 database it's safer to back up without corruption. On new backups the file is rotated out rather than being rewritten in place.

 * `iddb.d/` (directory):
-   Caches the public identity of every peer ZeroTier has spoken with in the last 60 days. This directory and its contents can be deleted, but this may result in slower connection initations since it will require that we go out and re-fetch full identities for peers we're speaking to.
+   Caches the public identity of every peer ZeroTier has spoken with in the last 60 days. This directory and its contents can be deleted, but this may result in slower connection initiations since it will require that we go out and re-fetch full identities for peers we're speaking to.

 * `networks.d` (directory):
   This caches network configurations and certificate information for networks you belong to. ZeroTier scans this directory for <network ID>.conf files on startup to recall its networks, so "touch"ing an empty <network ID>.conf file in this directory is a way of pre-configuring ZeroTier to join a specific network on startup without using the API. If the config file is empty ZeroTIer will just fetch it from the network's controller.
@@ -701,7 +701,7 @@
 				<key>USE_HFS+_COMPRESSION</key>
 				<false/>
 				<key>VERSION</key>
-				<string>1.10.2</string>
+				<string>1.10.3</string>
 			</dict>
 			<key>TYPE</key>
 			<integer>0</integer>
@@ -384,7 +384,7 @@ enum ZT_ResultCode
 	 */
 	ZT_RESULT_OK_IGNORED = 1,

-	// Fatal errors (>100, <1000)
+	// Fatal errors (>=100, <1000)

 	/**
 	 * Ran out of memory
@@ -1208,7 +1208,7 @@ typedef struct
 	bool ssoEnabled;

 	/**
-	 * SSO verison
+	 * SSO version
 	 */
 	uint64_t ssoVersion;

@@ -1246,6 +1246,11 @@ typedef struct
 	 * oidc client id
 	 */
 	char ssoClientID[256];
+
+	/**
+	 * sso provider
+	 **/
+	char ssoProvider[64];
 } ZT_VirtualNetworkConfig;

 /**
@@ -2066,7 +2071,7 @@ ZT_SDK_API int ZT_Node_sendUserMessage(ZT_Node *node,void *tptr,uint64_t dest,ui
 * NetworkConfigMaster base class in node/. No type checking is performed,
 * so a pointer to anything else will result in a crash.
 *
- * @param node ZertTier One node
+ * @param node ZeroTier One node
 * @param networkConfigMasterInstance Instance of NetworkConfigMaster C++ class or NULL to disable
 * @return OK (0) or error code if a fatal error condition has occurred
 */
@@ -5,7 +5,7 @@ ZeroTier One SDK - Android JNI Wrapper
 Building
 -----

-Reqires:
+Requires:

 * JDK
 * ANT
@@ -1,66 +0,0 @@
-LOCAL_PATH := $(call my-dir)
-
-include $(CLEAR_VARS)
-
-LOCAL_MODULE := ZeroTierOneJNI
-LOCAL_C_INCLUDES := \
-    $(ZT1)/include \
-    $(ZT1)/node \
-    $(ZT1)/osdep
-
-LOCAL_LDLIBS := -llog
-# LOCAL_CFLAGS := -g
-
-APP_UNIFIED_HEADERS := true
-
-LOCAL_CFLAGS := -DZT_USE_MINIUPNPC
-ifeq ($(TARGET_ARCH_ABI),x86_64)
-    LOCAL_CXXFLAGS := -maes -mpclmul -msse3 -msse4.1
-endif
-ifeq ($(TARGET_ARCH_ABI),arm64-v8a)
-    LOCAL_ARM_NEON := true
-    LOCAL_CXXFLAGS := -march=armv8-a+crypto -mfloat-abi=softfp -mfpu=neon -maes -isystem $NDK/sysroot/usr/include/$TRIPLE
-endif
-
-# ZeroTierOne SDK source files
-LOCAL_SRC_FILES := \
-    $(ZT1)/node/AES.cpp \
-    $(ZT1)/node/AES_aesni.cpp \
-    $(ZT1)/node/AES_armcrypto.cpp \
-    $(ZT1)/node/Bond.cpp \
-    $(ZT1)/node/C25519.cpp \
-	$(ZT1)/node/Capability.cpp \
-	$(ZT1)/node/CertificateOfMembership.cpp \
-	$(ZT1)/node/CertificateOfOwnership.cpp \
-	$(ZT1)/node/Identity.cpp \
-	$(ZT1)/node/IncomingPacket.cpp \
-	$(ZT1)/node/InetAddress.cpp \
-	$(ZT1)/node/Membership.cpp \
-	$(ZT1)/node/Multicaster.cpp \
-	$(ZT1)/node/Network.cpp \
-	$(ZT1)/node/NetworkConfig.cpp \
-	$(ZT1)/node/Node.cpp \
-	$(ZT1)/node/OutboundMulticast.cpp \
-	$(ZT1)/node/Packet.cpp \
-	$(ZT1)/node/Path.cpp \
-	$(ZT1)/node/Peer.cpp \
-	$(ZT1)/node/Poly1305.cpp \
-	$(ZT1)/node/Revocation.cpp \
-	$(ZT1)/node/Salsa20.cpp \
-	$(ZT1)/node/SelfAwareness.cpp \
-	$(ZT1)/node/SHA512.cpp \
-	$(ZT1)/node/Switch.cpp \
-	$(ZT1)/node/Tag.cpp \
-	$(ZT1)/node/Topology.cpp \
-	$(ZT1)/node/Trace.cpp \
-	$(ZT1)/node/Utils.cpp \
-	$(ZT1)/osdep/OSUtils.cpp
-
-# JNI Files
-LOCAL_SRC_FILES += \
-	com_zerotierone_sdk_Node.cpp \
-	ZT_jniarray.cpp \
-	ZT_jniutils.cpp \
-	ZT_jnilookup.cpp
-
-include $(BUILD_SHARED_LIBRARY)
@@ -1,5 +0,0 @@
-# NDK_TOOLCHAIN_VERSION := clang3.5
-APP_STL := c++_static
-APP_CPPFLAGS := -Wall -fstack-protector -fexceptions -fno-strict-aliasing -frtti -Wno-deprecated-register -DZT_NO_TYPE_PUNNING=1
-APP_PLATFORM := android-21
-APP_ABI := all
@@ -5,6 +5,7 @@
 #include "ZT_jniarray.h"
 #include <vector>
 #include <string>
+#include <cassert>

 jclass java_util_ArrayList;
 jmethodID java_util_ArrayList_;
Author	SHA1	Message	Date
Adam Ierymenko	dc762196dc	1.10.3 (#1875 ) Version bumps and other release stuff to ship 1.10.3	2023-02-15 14:04:42 -05:00
Adam Ierymenko	0a900dc275	Add date to release notes Add date	2023-02-15 14:04:02 -05:00
Joseph Henry	6f58510431	Update release notes (#1874 )	2023-02-15 14:03:13 -05:00
Monica Moniot	666fb7ea2d	eliminated duplicate paths (#1870 )	2023-02-06 11:50:05 -08:00
dependabot[bot]andGrant Limberg	f0778860e5	Bump tokio from 1.24.1 to 1.24.2 in /zeroidc (#1869 ) * Bump tokio from 1.24.1 to 1.24.2 in /zeroidc Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.24.1 to 1.24.2. - [Release notes](https://github.com/tokio-rs/tokio/releases) - [Commits](https://github.com/tokio-rs/tokio/commits) --- updated-dependencies: - dependency-name: tokio dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * vendor tokio update --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Grant Limberg <grant.limberg@zerotier.com>	2023-02-06 10:52:52 -08:00
dependabot[bot]andGrant Limberg	6aea546d6f	Bump bumpalo from 3.10.0 to 3.12.0 in /zeroidc (#1857 ) * Bump bumpalo from 3.10.0 to 3.12.0 in /zeroidc Bumps [bumpalo](https://github.com/fitzgen/bumpalo) from 3.10.0 to 3.12.0. - [Release notes](https://github.com/fitzgen/bumpalo/releases) - [Changelog](https://github.com/fitzgen/bumpalo/blob/main/CHANGELOG.md) - [Commits](https://github.com/fitzgen/bumpalo/compare/3.10.0...3.12.0) --- updated-dependencies: - dependency-name: bumpalo dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * vendor bumpalo update to fix dependabot --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Grant Limberg <grant.limberg@zerotier.com>	2023-01-30 09:03:01 -08:00
Joseph Henry	e0a3291235	Fix setMtu() on Linux. Add error checking (#1860 ) * Fix setMtu() on Linux. Add error checking * Slightly tweak ioctl MTU error message	2023-01-26 10:26:12 -08:00
Joseph Henry	b88d7091c8	Simplify dump command. Fix bond list command	2023-01-20 13:54:04 -08:00
zwf	15cfa3bf62	exclude static route with via ip in route helper (#1791 ) When adding Routes to zerotier's Managed Routes, the helper will add a route rule to the device that does not have a via ip, so that the address of the Destination segment cannot be routed correctly within the container. Here, based on the contents of the routes key in `zerotier-cli -j listnetworks`, by determining whether the via key has an ip address, if it is not null, helper will no longer add route rules.	2023-01-20 11:57:13 -08:00
Gleb Mazovetskiy	9c9d1650d1	Check for ARM Cryptography Extension support ARM Cryptography Extension is optional and not all ARM CPUs support it. For example, the CPU in Raspberry Pi 4 does not support it. Check for `__ARM_FEATURE_CRYPTO` before attempting to use the optional extension. `__ARM_FEATURE_CRYPTO` is defined by both clang and gcc when the target has the cryptography extension. Fixes #1854.	2023-01-20 09:29:09 +01:00
Grant Limberg	0ae09577f6	Client & Central Controller updates to support additonal OIDC features (#1848 ) Client side: * Fix compatibility with OneLogin * Requested scopes vary by OIDC provider. Different providers have different Controller side: Update Postgres queries to latest Central schema Added Central Controller support for the different providers * Base OIDC provider details are still attached to an org. Client ID & group/email lists are now associated with individual networks.	2023-01-19 15:39:15 -08:00
Brenton Bostick	a59f82093a	Fix Possible misuse of comma operator here (#1851 ) Xcode warns about "Possible misuse of comma operator here". Comma is a sequencing operator in C++ and original code does work, but is highly non-idiomatic.	2023-01-17 12:38:10 -05:00
Brenton Bostick	be95b56c10	fix typos (#1846 )	2023-01-13 10:14:57 -05:00
Sean OMeara	ea0f7dde95	removing pull_request builds from workflow	2023-01-13 14:15:02 +01:00
Grant Limberg	a59626c971	Bump zeroidc dependencies (#1847 ) openidconnect -> 2.5 base64 -> 0.21 url -> 2.3 bytes -> 1.3	2023-01-12 13:24:58 -08:00
Sean OMeara	67a7534c21	cargo update tokio >= 1.24 (#1842 )	2023-01-12 12:41:29 -08:00
Joseph Henry	39f3f5b2d9	User-configurable physical MTU for individual links This patch allows users to specify the physical layer MTU for individual links when in multipath mode. For example: { "settings": { "defaultBondingPolicy": "custom-balance-xor", "policies": { "custom-balance-xor": { "basePolicy": "balance-xor", "failoverInterval": 5000, "links": { "weird_5g_link": { "mtu": 1300 }, "enp5s0": { "mtu": 1400 } } } } } }	2023-01-12 07:12:19 +01:00
Joseph Henry	eccc31a4b9	Add forced TCP relay mode This patch implements a "TUNNELED" status indicator and "forceTcpRelay" setting for custom relays via local.conf. For example: { "settings": { "tcpFallbackRelay": "6.79.53.215/443", "forceTcpRelay":true } }	2023-01-12 07:12:19 +01:00
Brenton Bostick	d31f238be0	fix typos (#1843 )	2023-01-11 19:42:30 +01:00
Sean OMeara	27c26a77a2	running build workflow on pull_requests	2023-01-07 21:28:12 +01:00
Adam Ierymenko	ab503902c8	Merge pull request #1825 from zerotier/windows-allow-ping enable ICMPv4 in windows firewall	2023-01-04 11:49:26 -05:00
Adam Ierymenko	ed53b62f1b	Merge pull request #1827 from zerotier/default-route-mac2 Prevent shadowing VM routes as default route (macOS)	2023-01-04 11:48:54 -05:00
Adam Ierymenko	ad5ba54cd4	Merge pull request #1820 from zerotier/dev-low-bandwidth Low Bandwidth Mode (for IoT)	2023-01-04 11:48:15 -05:00
travis laduke	a6742b7f82	Prevent shadowing VM routes as default route (macOS) If you have a VM host like parallels, sometimes you get these link-local default routes: ``` netstat -nrfinet \| grep "default\\|\/1" 0/1 10.2.0.12 UGScg feth4823 default 192.168.82.1 UGScg en1 0/1 192.168.82.1 UGScIg en1 default link#22 UCSIg bridge101 ! 128.0/1 10.2.0.12 UGSc feth4823 128.0/1 192.168.82.1 UGScI en1 ``` (the link#22 one) The _getRTEs function inclused these routes in the list it makes as like: device: bridge101, target: 0.0.0.0/0 If it happens to be first in the list, bridge101 gets selected as the default route. Then Full Tunnel Mode doesn't work. The other routes in the list are like: device: en1 target: 192.168.1.0/24 via: metric: 0 ifscope: 0 device: en1 target: 192.168.1.1/32 via: metric: 0 ifscope: 0 We only need the device name from this, so either one will work.	2022-12-23 16:18:00 -08:00
Joseph Henry	91bae4b1a8	Add missing default initialization of _lowBandwidthMode	2022-12-22 10:08:02 -08:00
travis laduke	4959d8079b	enable ICMP in windows firewall	2022-12-21 15:38:46 -08:00
Sean OMeara	a558bd9312	cache cago on github actions (#1819 )	2022-12-14 19:10:08 +01:00
Sean OMeara	3e41163bbe	fixing windows github builds (#1818 )	2022-12-14 11:52:30 +01:00
Sean OMeara	10170b41c3	Revert "Improve default route on macOS (#1680 )" This reverts commit `117d7194af`.	2022-12-13 18:32:07 +01:00
Sean OMeara	e0e91e8397	disabling windows builds	2022-12-13 17:20:52 +01:00
Sean OMeara	d2de0292cc	mac and windows github builds (#1817 )	2022-12-13 16:49:08 +01:00
Sean OMeara	0210ba9c13	enabling mac and windows github builds	2022-12-13 16:16:17 +01:00
Travis LaDuke	117d7194af	Improve default route on macOS (#1680 ) re: issue #1088 and probably: https://discuss.zerotier.com/t/default-route-issue-osx-monterey-m1/6974 // current zerotier. // allow default adds two sets of routes. ``` netstat -rnfinet \| grep "/1\\|default" \| sort 0/1 10.2.0.2 UGScg feth4823 0/1 192.168.82.1 UGScIg en7 128.0/1 10.2.0.2 UGSc feth4823 128.0/1 192.168.82.1 UGScI en7 default 192.168.82.1 UGScg en7 ``` Then, something chaotic happens eventually, and networking stops working. // after patch ``` netstat -rnfinet \| grep "/1\\|default" \| sort 0/1 10.2.0.2 UGScg feth4823 128.0/1 10.2.0.2 UGSc feth4823 default 192.168.82.1 UGScg en7 ``` After the change, I can still: - use default route - route to other subnets I tested on high sierra through monterey and on freebsd13.1	2022-12-13 11:52:21 +01:00
Sean OMeara	7587ef5136	basic builds on github (#1815 ) Initial Github Actions build	2022-12-12 09:44:31 +01:00
Joseph Henry	087a797257	Merge pull request #1808 from zerotier/dev-tcp-proxy Dig tcp-proxy out of the git history	2022-12-07 09:40:42 -08:00
Grant Limberg	a02f42188c	Merge pull request #1811 from zerotier/cleanup/typos Cleanup/typos	2022-12-07 08:33:12 -08:00
Brenton Bostick	98e0bf22d3	fix actual typo in config key code	2022-12-07 10:23:11 -05:00
Brenton Bostick	1e2ff042b4	fix typos in docs, comments, and strings	2022-12-07 10:17:53 -05:00
travis laduke	b8eb9196e8	update tcp-relay README	2022-12-06 11:49:12 -08:00
travis laduke	db1df58955	resurrect tcp proxy	2022-12-06 11:49:12 -08:00
Brenton Bostick	2f5dc10399	Fix syntax error (#1806 ) Similar previous fix: https://github.com/zerotier/ZeroTierOne/commit/668ab8b85c169648141d961566f183cf71ae6fa6	2022-12-05 13:33:00 -08:00
Joseph Henry	4100615cd6	Merge branch 'dev' into dev-low-bandwidth	2022-12-05 13:26:57 -08:00
Joseph Henry	e27c3edaba	Merge branch 'dev' into dev-low-bandwidth	2022-12-05 13:23:04 -08:00
Joseph Henry	3c9ea2b667	Add low-bandwidth mode	2022-12-05 13:21:05 -08:00
Grant Limberg	065f42af1d	Merge pull request #1807 from zerotier/cleanup/typos fix typos	2022-12-05 08:34:53 -08:00
Grant Limberg	1d503f45ad	Merge pull request #1805 from zerotier/update/bad-file-descriptor Update/bad file descriptor	2022-12-05 08:33:12 -08:00
Brenton Bostick	5b5f9a069a	fix typos	2022-12-05 11:29:21 -05:00
Brenton Bostick	77c7f9133f	Migrate from ndk-build to CMake	2022-12-05 10:34:12 -05:00
Brenton Bostick	475281935e	Remove unused flags for arm64-v8a Through using ndk-build, -Wno-unused-command-line-argument is passed in somewhere in the pipeline and hides this warning. The warning can be turned on with: APP_CPPFLAGS := -Wunused-command-line-argument ... and then when building, you can see: C/C++: clang++: warning: argument unused during compilation: '-mfloat-abi=softfp' [-Wunused-command-line-argument] C/C++: clang++: warning: argument unused during compilation: '-mfpu=neon' [-Wunused-command-line-argument] C/C++: clang++: warning: argument unused during compilation: '-maes' [-Wunused-command-line-argument] These are unused because both floating-point and NEON are required in all standard ARMv8 implementations. [1] [2] [1] https://developer.arm.com/documentation/den0024/a/AArch64-Floating-point-and-NEON [2] https://stackoverflow.com/a/29891469	2022-12-05 10:34:12 -05:00
Brenton Bostick	cdf248b1e2	Fix build problem related to unified headers Since NDKr15 (released 2017), unified headers are used by default [1] Remove -isystem option that was passing bad values to command-line. The actual value being passed to command-line was: ``` -isystem DK/sysroot/usr/include/RIPLE ``` because of using $NDK and $TRIPLE instead of $(NDK) and $(TRIPLE) But regardless, $NDK and $TRIPLE were never actually defined values and were just place-holders mentioned in [1] [1] https://android.googlesource.com/platform/ndk/+/ndk-release-r16/docs/UnifiedHeaders.md	2022-12-05 10:34:12 -05:00
Joseph Henry	85c0322313	Fix TCP relay setting	2022-12-01 15:12:54 -08:00
Adam Ierymenko	ebc1ed4015	Hide warning about readdir_r for now.	2022-12-01 11:07:20 -05:00
Adam Ierymenko	a25da7f771	Merge pull request #1799 from zerotier/cleanup/suggest-braces Fix warning: suggest braces around initialization of subobject	2022-12-01 11:03:26 -05:00
Adam Ierymenko	c78f103ca6	Merge pull request #1800 from zerotier/cleanup/printf-z Fix several warning: format specifies type 'XXX' but the argument has…	2022-12-01 11:03:11 -05:00
Brenton Bostick	4d50ed0b9d	Fix several warning: format specifies type 'XXX' but the argument has type 'YYY' Use %z for printing size_t and PRId64 etc. macros for printing platform-specific widths, and remove now-redundant casts	2022-12-01 08:42:06 -05:00
Brenton Bostick	9ac2cfe611	Fix warning: suggest braces around initialization of subobject	2022-12-01 08:35:31 -05:00
Sean OMeara	85da0b419c	drone config	2022-11-30 11:01:02 +01:00
Brenton Bostick	3ddaa60de9	prevent: warning: unused variable 'gotViaProc' (#1797 )	2022-11-29 17:55:33 +01:00
Grant Limberg	25641d956e	Merge pull request #1795 from zerotier/bugfix/typos Bugfix/typos	2022-11-28 08:58:27 -08:00
Brenton Bostick	3b8c33d49a	fix typos in code	2022-11-28 09:23:58 -05:00
Brenton Bostick	f74a594e98	fix typos in comments and strings	2022-11-28 09:23:45 -05:00
Sean OMeara	668ab8b85c	fixing Makefile for armv6k (#1790 )	2022-11-19 22:59:55 +01:00
Joseph Henry	98b190c626	Minor adjustment to packaging README	2022-11-14 15:25:50 -08:00
Grant Limberg	9568a4f2b4	netinet6/in6_var.h not available in iOS	2022-11-10 11:35:34 -08:00
Grant Limberg	b41e0910b0	Fun times in ~~cleveland~~ NDK-land	2022-11-09 11:11:10 -08:00
Joseph Henry	6448189d20	Update snap upload target	2022-11-09 08:52:55 -08:00
Joseph Henry	1694d510ec	Update snap build target	2022-11-08 16:50:42 -08:00
Adam Ierymenko	af7ccff846	Merge branch 'dev' of github.com:/zerotier/ZeroTierOne into dev	2022-11-04 11:15:13 -04:00
Adam Ierymenko	381460fd97	Merge pull request #1736 from visuve/dev Fix service installation MAX_PATH bug on Windows	2022-11-04 11:14:49 -04:00
Joseph Henry	b02a41751c	Fix unresponsiveness when moving flows in balance-aware (See #1764 )	2022-11-02 08:46:11 -07:00
visuve	378e4ea34e	Fix service installation MAX_PATH bug on Windows - On newer Windows, a path might hold up to 32,767 characters - https://docs.microsoft.com/en-us/windows/win32/fileio/maximum-file-path-limitation - The previous installation did not also check for ERROR_INSUFFICIENT_BUFFER which could lead to an ill formatted path	2022-08-10 17:08:51 +03:00