44310b6566
Enforce auth ACL on tunnel channels
...
Previously, authfile ACL restrictions were only checked during the
initial config handshake. This adds ACL enforcement at the tunnel
layer when processing SSH channel requests, ensuring that each
outbound connection is validated against the user's allowed addresses.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-09 20:47:37 +11:00
91d0f66cfa
Fix CHISEL_KEY environment variable ignored when --keyfile not set ( #571 )
...
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: jpillora <633843+jpillora@users.noreply.github.com >
2025-09-11 22:17:06 +10:00
dca1156401
chore: remove refs to deprecated io/ioutil ( #459 )
...
thanks @testwill
2023-10-19 22:58:31 +11:00
fbc8ad9731
Fix #390 : Use code to generate certificates for client & server ( #400 )
2023-01-27 22:50:23 +11:00
2d6c5cba61
Update client to fall-back to MD5 fingerprints
...
Signed-off-by: Simon Rüegg <simon@rueggs.ch >
2020-11-10 08:44:36 +01:00
c3aa71bec7
test: disable goroutine leak detection for windows
2020-09-03 07:54:26 +10:00
59d78358cc
merge mtls (thanks @wxia20)
2020-09-03 07:08:55 +10:00
0edc0e5399
Merge remote-tracking branch 'wxia/mTLS_authentication'
2020-09-01 07:08:18 +10:00
3542fb8e85
address PR code review feedback
2020-08-30 08:18:26 -04:00
798ec04a6b
fix stdio "cannot listen", fix udp goroutine leak
2020-08-29 01:27:08 +10:00
7ca9034c47
mTLS authentication feature.
...
1. Adding client cert and key to Chisel client.
2. Adding trusted CAs to Chisel server.
3. Adding TLS/mTLS e2e test case and test certs and keys.
4. Adding flag and help comments.
2020-08-24 18:17:38 -04:00
4f33489f62
fix multiple getters panic
2020-08-22 22:29:13 +10:00
7c997d2db8
added client tls skip-verify and ca flags ( closes #129 closes #116 )
...
thanks to @mvladev and @alfonso-presa, I couldn't merge your PRs since I've done a massive refactor, though I borrowed snippets from them
2020-07-23 07:12:49 +10:00
d8b404bd02
add tls (and auto-certificate) support
2020-07-23 05:11:28 +10:00
e3abdc607e
udp listener cleanup, add early port listen checks
2020-07-23 01:26:47 +10:00
53e72fe2ba
add udp support, massive refactor and more (see below)
...
* split out share/ package into multiple subpackages
* added share/compat.go to keep backward compatibility(ish)
* moved shared tunnelling logic from client/server packages into share/tunnel/
* added remote protocol "<host>:<port>/<protocol>", currently supporting tcp and udp
* added an end-to-end test suite
* added TODO e2e tests as contribution targets
* added deep context integration for improved cleanup and cancellation
2020-07-18 11:05:53 +10:00
04d4f30dd6
upgrade deps, rename test/ to bench/, add goreleaser
2020-04-02 01:31:42 +11:00
6cb3ab2186
added SOCKS5 server support, added HTTP CONNECT Proxy client support, improved cli, improve docs, added badges
2017-04-07 20:18:15 +10:00
1871137e32
ssh working, user auth working, addr whitelisting (mostly) working
2015-03-19 02:41:17 +11:00
68eb79a634
progressing to users and remote address whitelists
2015-03-19 01:25:20 +11:00
d6b070ed5a
added security warning
2015-03-18 03:09:42 +11:00
7043d06be8
since test isn't really a go test, converted to a main package
2015-03-17 09:19:16 +11:00
5dd999f0ad
renamed auth to key, fixed docs
2015-03-17 08:53:33 +11:00
0b084da1d0
combined both programs into one, with two subcommands
2015-03-16 18:49:09 +11:00
292ee12f7d
master is now merged with the 'encrypt' branch, optional symetric encrypt wins over ssh (due to its optionality)
2015-03-15 06:13:33 +11:00
6fa2b5ea8e
fixed missing var in test package
2015-03-15 06:11:41 +11:00
9432ac005b
added docs
2015-03-14 21:27:56 +11:00
e106c625c6
symetrically encrypted tcp working, as slow as ssh :(
2015-03-14 05:02:51 +11:00
9b52e165f7
working, 4x slower than yamux :(
2015-03-14 03:40:18 +11:00
b87d423f73
more docs
2015-03-12 02:11:30 +11:00
141258bf90
tests and simple benchmarks working
2015-03-11 15:57:01 +11:00
Jaime Pillora