nvpn 4.1.13

CLI and daemon for Nostr VPN private mesh networks
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59

#[cfg(any(target_os = "macos", test))]
fn macos_endpoint_bypass_underlay_refresh_required(
    current_routes: &[String],
    current_underlay: Option<&crate::MacosRouteSpec>,
    desired_routes: &[String],
    current_routes_present: bool,
) -> bool {
    current_underlay.is_none() || current_routes != desired_routes || !current_routes_present
}

#[cfg(any(target_os = "macos", test))]
fn macos_endpoint_bypass_verification_due(
    last_verified_at: Option<Instant>,
    now: Instant,
) -> bool {
    last_verified_at.is_none_or(|last_verified_at| {
        now.saturating_duration_since(last_verified_at)
            >= MACOS_ENDPOINT_BYPASS_VERIFY_INTERVAL
    })
}

#[cfg(target_os = "macos")]
fn macos_direct_underlay_restore_needed(
    previous_exit_requested: bool,
    next_exit_requested: bool,
) -> bool {
    previous_exit_requested && !next_exit_requested
}

#[cfg(all(test, target_os = "macos"))]
mod macos_wg_transition_tests {
    use super::{FipsPrivateTunnelRuntime, macos_direct_underlay_restore_needed};

    #[test]
    fn stale_wireguard_is_removed_before_fips_routes_change() {
        assert!(FipsPrivateTunnelRuntime::macos_wg_upstream_needs_cleanup(
            false,
            Some(true)
        ));
        assert!(FipsPrivateTunnelRuntime::macos_wg_upstream_needs_cleanup(
            true,
            Some(false)
        ));
        assert!(!FipsPrivateTunnelRuntime::macos_wg_upstream_needs_cleanup(
            true,
            Some(true)
        ));
        assert!(!FipsPrivateTunnelRuntime::macos_wg_upstream_needs_cleanup(
            false, None
        ));
    }

    #[test]
    fn only_an_exit_to_direct_transition_repairs_the_underlay_default() {
        assert!(macos_direct_underlay_restore_needed(true, false));
        assert!(!macos_direct_underlay_restore_needed(false, false));
        assert!(!macos_direct_underlay_restore_needed(true, true));
    }
}