jschoubben
7283924a35
On an adopted machine the private network takes the predecessor's tunnel over in place (hq ADR 0105). Genesis finds the one interface up besides the mesh's own, settles the hub's port and the mesh's range on it, and skips ADR 0100's non-overlap check for a range that is now the tunnel's; a --hub-port or --overlay-range that disagrees is refused naming the tunnel's. At enrolment the found interface's private key becomes this node's overlay key — the one credential the mesh takes rather than mints — stored where a generated one is stored, never printed and never sent; the tunnel (port, address, range, peers) travels with the keys so the mesh composes from it before the first declaration. The interface's service may say what it takes over. Before the mesh's unit starts, the found configuration is kept like any held file and the found unit is stopped and disabled; nothing is flushed, and an interface still up after its unit stopped refuses the takeover rather than half-working. The report says what was carried: interface, port, range, peer count, taken or not, and where the original was kept.
29 lines
921 B
Go
29 lines
921 B
Go
package identity
|
|
|
|
import (
|
|
"strings"
|
|
"testing"
|
|
)
|
|
|
|
// novox/hq ADR 0105: the found tunnel's private key becomes the node's overlay key, stored as a
|
|
// generated one is, and the public half the mesh records is derived from it — so the peers that
|
|
// know the tunnel by that key keep reaching it.
|
|
func TestAnOverlayKeyTakenFromAFoundTunnelIsTheSameKey(t *testing.T) {
|
|
generated, err := GenerateOverlayKey()
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
taken, err := OverlayKeyFrom(generated.Private)
|
|
if err != nil {
|
|
t.Fatal(err)
|
|
}
|
|
if taken.Public != generated.Public || taken.Private != generated.Private {
|
|
t.Fatalf("a key taken from a private half is not that key: %+v vs %+v", taken, generated)
|
|
}
|
|
for _, bad := range []string{"", "not base64!", "c2hvcnQ="} {
|
|
if _, err := OverlayKeyFrom(bad); err == nil || !strings.Contains(err.Error(), "found tunnel") {
|
|
t.Errorf("%q was taken as a key: %v", bad, err)
|
|
}
|
|
}
|
|
}
|