curben
/
cloudflared-mirror
mirror of https://github.com/cloudflare/cloudflared.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
cloudflared-mirror/cmd/cloudflared/tunnel
History
Luis Neto 31a870b291 TUN-8855: Update PQ curve preferences 
## Summary

Nowadays, Cloudflared only supports X25519Kyber768Draft00 (0x6399,25497) but older versions may use different preferences.

For FIPS compliance we are required to use P256Kyber768Draft00 (0xfe32,65074) which is supported in our internal fork of [Go-Boring-1.22.10](https://bitbucket.cfdata.org/projects/PLAT/repos/goboring/browse?at=refs/heads/go-boring/1.22.10 "Follow link").

In the near future, Go will support by default the X25519MLKEM768 (0x11ec,4588) given this we may drop the usage of our public fork of GO.

To summarise:

* Cloudflared FIPS: QUIC_CURVE_PREFERENCES=65074
* Cloudflared non-FIPS: QUIC_CURVE_PREFERENCES=4588

Closes TUN-8855
 		2025-01-30 05:02:47 -08:00
..
cmd.go TUN-8855: Update PQ curve preferences 2025-01-30 05:02:47 -08:00
cmd_test.go TUN-1669: Update license message in help text. Also fix test 2019-04-18 10:42:48 -05:00
config_test.go TUN-7700: Implement feature selector to determine if connections will prefer post quantum cryptography 2023-08-29 09:05:33 +01:00
configuration.go TUN-8855: Update PQ curve preferences 2025-01-30 05:02:47 -08:00
configuration_test.go TUN-7584: Bump go 1.20.6 2023-07-26 13:52:40 -07:00
credential_finder.go TUN-7134: Acquire token for cloudflared tail 2023-04-12 09:43:38 -07:00
filesystem.go TUN-7590: Remove usages of ioutil 2023-07-17 19:08:38 +00:00
info.go TUN-5482: Refactor tunnelstore client related packages for more coherent package 2021-12-28 17:17:49 +00:00
ingress_subcommands.go CUSTESC-33731: Make rule match test report rule in 0-index base 2023-10-03 12:18:49 +01:00
login.go TUN-8871: Accept login flag to authenticate with Fedramp environment 2025-01-17 08:16:36 -08:00
quick_tunnel.go TUN-8484: Print response when QuickTunnel can't be unmarshalled 2024-10-07 10:51:21 -05:00
server.go Add max upstream connections dns-proxy option (#290) 2021-02-12 21:32:29 +04:00
signal.go TUN-4067: Reformat code for consistent import order, grouping, and fix formatting. Added goimports target to the Makefile to make this easier in the future. 2021-03-24 10:53:29 -05:00
signal_test.go TUN-7584: Bump go 1.20.6 2023-07-26 13:52:40 -07:00
subcommand_context.go TUN-8424: Refactor capnp registration server 2024-05-24 11:40:10 -07:00
subcommand_context_teamnet.go TUN-7787: Refactor cloudflared to use new route endpoints based on route IDs 2023-09-19 09:56:02 +00:00
subcommand_context_test.go TUN-7813: Improve tunnel delete command to use cascade delete 2023-09-20 12:35:43 +01:00
subcommand_context_vnets.go ZTC-446: Allow to force delete a vnet 2023-01-20 11:52:56 +00:00
subcommands.go TUN-8855: Update PQ curve preferences 2025-01-30 05:02:47 -08:00
subcommands_test.go TUN-5679: Add support for service install using Tunnel Token 2022-03-03 18:59:03 +00:00
tag.go TUN-8423: Deprecate older legacy tunnel capnp interfaces 2024-05-23 11:17:49 -07:00
tag_test.go TUN-8423: Deprecate older legacy tunnel capnp interfaces 2024-05-23 11:17:49 -07:00
teamnet_subcommands.go TUN-7787: Refactor cloudflared to use new route endpoints based on route IDs 2023-09-19 09:56:02 +00:00
vnets_subcommands.go ZTC-446: Allow to force delete a vnet 2023-01-20 11:52:56 +00:00