Release v1.5.2
Added
- Warn when a non lighthouse node does not have lighthouse hosts configured. (#587)
Changed
-
No longer fatals if expired CA certificates are present in
pki.ca
, as long as 1 valid CA is present. (#599) -
nebula-cert
will now enforce ipv4 addresses. (#604) -
Warn on macOS if an unsafe route cannot be created due to a collision with an
existing route. (#610) -
Warn if you set a route MTU on platforms where we don't support it. (#611)
Fixed
-
Rare race condition when tearing down a tunnel due to
recv_error
and sending packets on another thread. (#590) -
Bug in
routes
andunsafe_routes
handling that was introduced in 1.5.0. (#595) -
-test
mode no longer results in a crash. (#602)
Removed
x509.ca
config alias forpki.ca
. (#604)
Security
- Upgraded
golang.org/x/crypto
to address an issue which allowed unauthenticated clients to cause a panic in SSH
servers. (#603)