nvpn 4.1.5

CLI and daemon for Nostr VPN private mesh networks
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47

#[cfg(any(target_os = "macos", test))]
fn macos_endpoint_bypass_underlay_refresh_required(
    current_routes: &[String],
    current_underlay: Option<&crate::MacosRouteSpec>,
    desired_routes: &[String],
) -> bool {
    current_underlay.is_none() || current_routes != desired_routes
}

#[cfg(target_os = "macos")]
fn macos_direct_underlay_restore_needed(
    previous_exit_requested: bool,
    next_exit_requested: bool,
) -> bool {
    previous_exit_requested && !next_exit_requested
}

#[cfg(all(test, target_os = "macos"))]
mod macos_wg_transition_tests {
    use super::{FipsPrivateTunnelRuntime, macos_direct_underlay_restore_needed};

    #[test]
    fn stale_wireguard_is_removed_before_fips_routes_change() {
        assert!(FipsPrivateTunnelRuntime::macos_wg_upstream_needs_cleanup(
            false,
            Some(true)
        ));
        assert!(FipsPrivateTunnelRuntime::macos_wg_upstream_needs_cleanup(
            true,
            Some(false)
        ));
        assert!(!FipsPrivateTunnelRuntime::macos_wg_upstream_needs_cleanup(
            true,
            Some(true)
        ));
        assert!(!FipsPrivateTunnelRuntime::macos_wg_upstream_needs_cleanup(
            false, None
        ));
    }

    #[test]
    fn only_an_exit_to_direct_transition_repairs_the_underlay_default() {
        assert!(macos_direct_underlay_restore_needed(true, false));
        assert!(!macos_direct_underlay_restore_needed(false, false));
        assert!(!macos_direct_underlay_restore_needed(true, true));
    }
}