summaryrefslogtreecommitdiffhomepage
path: root/ipn
diff options
context:
space:
mode:
authorBrad Fitzpatrick <bradfitz@tailscale.com>2021-06-15 12:12:15 -0700
committerBrad Fitzpatrick <brad@danga.com>2021-06-15 14:05:46 -0700
commitcd282ec00fa4fbb071a40627c7a1f285aa1322e7 (patch)
tree6c97adc8e3a44ddf912594e93718e36507fa8aa8 /ipn
parent082cc1b0a720dec9345914d08a275947cb5fd78a (diff)
downloadtailscale-cd282ec00fa4fbb071a40627c7a1f285aa1322e7.tar.xz
tailscale-cd282ec00fa4fbb071a40627c7a1f285aa1322e7.zip
tailcfg: add DNSConfig.CertDomains
Updates #1235 Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
Diffstat (limited to 'ipn')
-rw-r--r--ipn/ipnlocal/local.go1
-rw-r--r--ipn/ipnstate/ipnstate.go7
2 files changed, 8 insertions, 0 deletions
diff --git a/ipn/ipnlocal/local.go b/ipn/ipnlocal/local.go
index 462cd60af..01354d085 100644
--- a/ipn/ipnlocal/local.go
+++ b/ipn/ipnlocal/local.go
@@ -325,6 +325,7 @@ func (b *LocalBackend) updateStatus(sb *ipnstate.StatusBuilder, extraLocked func
s.AuthURL = b.authURLSticky
if b.netMap != nil {
s.MagicDNSSuffix = b.netMap.MagicDNSSuffix()
+ s.CertDomains = append([]string(nil), b.netMap.DNS.CertDomains...)
}
})
sb.MutateSelfStatus(func(ss *ipnstate.PeerStatus) {
diff --git a/ipn/ipnstate/ipnstate.go b/ipn/ipnstate/ipnstate.go
index 99663acf1..52aa3f97a 100644
--- a/ipn/ipnstate/ipnstate.go
+++ b/ipn/ipnstate/ipnstate.go
@@ -45,6 +45,13 @@ type Status struct {
// has MagicDNS enabled.
MagicDNSSuffix string
+ // CertDomains are the set of DNS names for which the control
+ // plane server will assist with provisioning TLS
+ // certificates. See SetDNSRequest for dns-01 ACME challenges
+ // for e.g. LetsEncrypt. These names are FQDNs without
+ // trailing periods, and without any "_acme-challenge." prefix.
+ CertDomains []string
+
Peer map[key.Public]*PeerStatus
User map[tailcfg.UserID]tailcfg.UserProfile
}