3 Commits

Include renames

Author	SHA1	Message	Date
admin	b9b831fb90	D30: a wait stamp dated after now (a clock that jumped back) is dropped, never a block until that date — the commit's security review; red-proved; unreleased	2026-10-22 23:08:25 +02:00
admin	39fb9cbf6c	D30 rotation hardened after review: the key file is replaced by an fsynced rename over it (never missing or empty), the first old key stays private.key.prev, later ones dated (3 kept), the once-an-hour bound survives a restart; red-proved; CONTEXT; unreleased	2026-10-22 23:00:05 +02:00
admin	ae69ad4512	D30 (R-1204): a handshake stamped in the future for 15 min gives a new WireGuard key, registered on the existing peer path (the hub re-keys in place; its full-list push swaps the key on ep0 — nothing new on ep0); old key kept as private.key.prev; red-proved; unreleased	2026-10-22 20:52:52 +02:00