From af41e076488b632163ad715978c85f44c5050d7d Mon Sep 17 00:00:00 2001 From: Daniel Date: Tue, 19 Sep 2023 15:46:55 +0200 Subject: [PATCH] Add support for AllowUnencrypted state (disabled) --- firewall/tunnel.go | 2 ++ 1 file changed, 2 insertions(+) diff --git a/firewall/tunnel.go b/firewall/tunnel.go index 0f747e18..cadab2ea 100644 --- a/firewall/tunnel.go +++ b/firewall/tunnel.go @@ -160,6 +160,8 @@ func DeriveTunnelOptions(lp *profile.LayeredProfile, proc *process.Process, dest } if !connEncrypted { tunnelOpts.Destination.Regard = tunnelOpts.Destination.Regard.Add(navigator.StateTrusted) + // TODO: Add this when all Hubs are on v0.6.21+ + // tunnelOpts.Destination.Regard = tunnelOpts.Destination.Regard.Add(navigator.StateAllowUnencrypted) } // Add required verified owners if community nodes should not be used.