Skip to content

swift: remove signing from TailscaleKit framework builds#35

Merged
barnstar merged 1 commit intomainfrom
barnstar/swift-signing
Apr 28, 2025
Merged

swift: remove signing from TailscaleKit framework builds#35
barnstar merged 1 commit intomainfrom
barnstar/swift-signing

Conversation

@barnstar
Copy link
Member

updates tailscale/tailscale#15802

"make ios" and "make macos" for TailscaleKit should produce unsigned frameworks. Auto-signing turned off in xCode as well.

This also removes the kCFNetworkProxiesHTTPSEnable flag for iOS which is not available.

Sample builds and runs as expected. Tests pass. These are still signed by Tailscale (and will have to be changed if somebody wants to run them).

updates tailscale/tailscale#15802

make ios and make macos for TailscaleKit should build unsigned frameworks.

This also removes the kCFNetworkProxiesHTTPSEnable flag for iOS which
is not available.

Signed-off-by: Jonathan Nobels <jonathan@tailscale.com>
@barnstar barnstar requested review from bradfitz and danderson April 28, 2025 16:49
@ghost
Copy link

ghost commented Apr 28, 2025

Pull Request Revisions

RevisionDescription
r1
Disabled code signing, updated proxy configurationModified Makefile and Xcode project to disable code signing, and updated URLSession+Tailscale.swift to conditionally set HTTPS proxy for macOS

✅ AI review completed for r1
Help React with emojis to give feedback on AI-generated reviews:
  • 👍 means the feedback was helpful and actionable
  • 👎 means the feedback was incorrect or unhelpful
💬 Replying to feedback with a comment helps us improve the system. Your input also contributes to shaping future interactions with the AI reviewer.

We'd love to hear from you—reach out anytime at team@review.ai.

Comment on lines +32 to +34
#if os(macOS)
config[kCFNetworkProxiesHTTPSEnable] = true
#endif
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In swift/TailscaleKit/URLSession+Tailscale.swift, the HTTPS proxy enablement is now conditionally applied only on macOS. Did you verify that excluding the HTTPS enable flag on iOS doesn't affect HTTP connections that upgrade to HTTPS?

@barnstar barnstar merged commit 0b970d4 into main Apr 28, 2025
3 of 4 checks passed
@barnstar barnstar deleted the barnstar/swift-signing branch May 5, 2025 18:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants