mirror of
				https://github.com/juanfont/headscale.git
				synced 2025-10-28 10:51:44 +01:00 
			
		
		
		
	Use CapVer to offer Noise only to supported clients
This commit is contained in:
		
							parent
							
								
									865f1ffb3c
								
							
						
					
					
						commit
						b3cf5289f8
					
				
							
								
								
									
										6
									
								
								api.go
									
									
									
									
									
								
							
							
						
						
									
										6
									
								
								api.go
									
									
									
									
									
								
							@ -25,12 +25,6 @@ const (
 | 
			
		||||
	ErrRegisterMethodCLIDoesNotSupportExpire = Error(
 | 
			
		||||
		"machines registered with CLI does not support expire",
 | 
			
		||||
	)
 | 
			
		||||
 | 
			
		||||
	// The CapabilityVersion is used by Tailscale clients to indicate
 | 
			
		||||
	// their codebase version. Tailscale clients can communicate over TS2021
 | 
			
		||||
	// from CapabilityVersion 28.
 | 
			
		||||
	// See https://github.com/tailscale/tailscale/blob/main/tailcfg/tailcfg.go
 | 
			
		||||
	NoiseCapabilityVersion = 28
 | 
			
		||||
)
 | 
			
		||||
 | 
			
		||||
func (h *Headscale) HealthHandler(
 | 
			
		||||
 | 
			
		||||
@ -9,6 +9,19 @@ import (
 | 
			
		||||
	"tailscale.com/tailcfg"
 | 
			
		||||
)
 | 
			
		||||
 | 
			
		||||
const (
 | 
			
		||||
	// The CapabilityVersion is used by Tailscale clients to indicate
 | 
			
		||||
	// their codebase version. Tailscale clients can communicate over TS2021
 | 
			
		||||
	// from CapabilityVersion 28, but we only have good support for it
 | 
			
		||||
	// since https://github.com/tailscale/tailscale/pull/4323 (Noise in any HTTPS port).
 | 
			
		||||
	//
 | 
			
		||||
	// Related to this change, there is https://github.com/tailscale/tailscale/pull/5379,
 | 
			
		||||
	// where CapabilityVersion 39 is introduced to indicate #4323 was merged.
 | 
			
		||||
	//
 | 
			
		||||
	// See also https://github.com/tailscale/tailscale/blob/main/tailcfg/tailcfg.go
 | 
			
		||||
	NoiseCapabilityVersion = 39
 | 
			
		||||
)
 | 
			
		||||
 | 
			
		||||
// KeyHandler provides the Headscale pub key
 | 
			
		||||
// Listens in /key.
 | 
			
		||||
func (h *Headscale) KeyHandler(
 | 
			
		||||
@ -18,6 +31,10 @@ func (h *Headscale) KeyHandler(
 | 
			
		||||
	// New Tailscale clients send a 'v' parameter to indicate the CurrentCapabilityVersion
 | 
			
		||||
	clientCapabilityStr := req.URL.Query().Get("v")
 | 
			
		||||
	if clientCapabilityStr != "" {
 | 
			
		||||
		log.Debug().
 | 
			
		||||
			Str("handler", "/key").
 | 
			
		||||
			Str("v", clientCapabilityStr).
 | 
			
		||||
			Msg("New noise client")
 | 
			
		||||
		clientCapabilityVersion, err := strconv.Atoi(clientCapabilityStr)
 | 
			
		||||
		if err != nil {
 | 
			
		||||
			writer.Header().Set("Content-Type", "text/plain; charset=utf-8")
 | 
			
		||||
@ -52,6 +69,9 @@ func (h *Headscale) KeyHandler(
 | 
			
		||||
			return
 | 
			
		||||
		}
 | 
			
		||||
	}
 | 
			
		||||
	log.Debug().
 | 
			
		||||
		Str("handler", "/key").
 | 
			
		||||
		Msg("New legacy client")
 | 
			
		||||
 | 
			
		||||
	// Old clients don't send a 'v' parameter, so we send the legacy public key
 | 
			
		||||
	writer.Header().Set("Content-Type", "text/plain; charset=utf-8")
 | 
			
		||||
 | 
			
		||||
		Loading…
	
		Reference in New Issue
	
	Block a user