Kristoffer Dalby be114c0d63 hscontrol: refuse a key expiry that cannot be encoded ...

handleRegister, the OIDC auth path and SetNodeExpiry refuse it. Expiries
are stored in UTC, which SQLite can read back, and loaded in UTC, as
PostgreSQL returns the server's zone. The v1 API answers 400.

Fixes ANT-2026-QMCAFJ1Q

(cherry picked from commit 15a8c7584e, adapted: gRPC ExpireNode instead of REST v1)

2026-10-30 10:33:17 +01:00

..

auth_cache_test.go

state: replace zcache with bounded LRU for auth cache

2026-04-10 14:09:57 +01:00

auth_tagged_expiry_test.go

state: give another user's key on a tagged machine a new device

2026-10-30 10:33:17 +01:00

autoapprove_test.go

state: batch route auto-approval into one policy rebuild

2026-06-08 10:04:49 +02:00

connect_test.go

state: mark expired nodes offline without ending the session

2026-09-23 21:19:22 +02:00

debug_test.go

hscontrol/state: make NodeStore batch configuration tunable (#2886)

2025-11-28 16:38:29 +01:00

debug.go

go.mod: update tailscale.com to v1.104.4

2026-10-30 10:33:17 +01:00

endpoint_test.go

state: classify map requests before broadcasting

2026-09-23 21:19:22 +02:00

ephemeral_test.go

state: rename persist helpers to say what they do

2026-09-23 21:19:22 +02:00

ha_health.go

all: apply godoc [Name] link conventions across comments

2026-05-19 09:55:22 +02:00

maprequest_test.go

go.mod: update tailscale.com to v1.104.4

2026-10-30 10:33:17 +01:00

maprequest.go

go.mod: update tailscale.com to v1.104.4

2026-10-30 10:33:17 +01:00

node_health_test.go

mapper: skip peers whose key expiry cannot be encoded

2026-10-30 10:33:17 +01:00

node_health.go

mapper: skip peers whose key expiry cannot be encoded

2026-10-30 10:33:17 +01:00

node_store_hostname_test.go

state: auto-bump GivenName on collision and add SetGivenName

2026-04-18 15:12:21 +01:00

node_store_stop_test.go

state: signal NodeStore shutdown without closing writeQueue

2026-06-08 10:04:49 +02:00

node_store_test.go

state: send relogins as whole nodes when peers need them

2026-10-13 14:35:52 +02:00

node_store.go

state: send relogins as whole nodes when peers need them

2026-10-13 14:35:52 +02:00

persist_clobber_test.go

state: rename persist helpers to say what they do

2026-09-23 21:19:22 +02:00

persist_test.go

hscontrol: refuse a key expiry that cannot be encoded

2026-10-30 10:33:17 +01:00

ping_test.go

state: drain pending pings on Close

2026-04-17 16:31:49 +01:00

ping.go

all: apply godoc [Name] link conventions across comments

2026-05-19 09:55:22 +02:00

primaries_property_test.go

state, servertest: property-test HA election + invariant catalogue

2026-05-18 17:18:08 +02:00

primaries_test.go

state, servertest: property-test HA election + invariant catalogue

2026-05-18 17:18:08 +02:00

reload_policy_test.go

policy: backport peer-map optimizations for 0.29.6

2026-10-24 11:15:00 +02:00

rename_test.go

state: reject renames whose FQDN exceeds the hostname limit

2026-07-01 14:33:03 +00:00

ssh_check_test.go

state, policy, noise: implement SSH check period auto-approval

2026-02-25 21:28:05 +01:00

state.go

hscontrol: refuse a key expiry that cannot be encoded

2026-10-30 10:33:17 +01:00

tags.go

all: apply godoc [Name] link conventions across comments

2026-05-19 09:55:22 +02:00

test_helpers.go

all: apply godoc [Name] link conventions across comments

2026-05-19 09:55:22 +02:00