summaryrefslogtreecommitdiffhomepage
path: root/ipn/ipnlocal/cert.go
AgeCommit message (Expand)AuthorFilesLines
2026-01-23all: remove AUTHORS file and references to itWill Norris1-1/+1
2026-01-16tsnet: add support for ServicesHarry Harpham1-0/+19
2025-12-19cmd/k8s-operator,ipn/ipnlocal: allow opting out of ACME order replace extensi...Irbe Krumina1-1/+4
2025-12-18ipn/ipnlocal: log cert renewal failures (#18246)Irbe Krumina1-1/+5
2025-11-16syncs: add Mutex/RWMutex alias/wrappers for future mutex debuggingBrad Fitzpatrick1-3/+3
2025-09-30feature, net/tshttpproxy: pull out support for using proxies as a featureBrad Fitzpatrick1-1/+2
2025-09-16feature/featuretags, all: add ts_omit_acme to disable TLS cert supportBrad Fitzpatrick1-1/+58
2025-04-08ipn/ipnlocal: include previous cert in new ACME orders (#15595)Andrew Lytvynov1-4/+15
2025-03-13ipn/ipnlocal, envknob: make it possible to configure the cert client to act i...Irbe Krumina1-3/+34
2025-03-11ipn/ipnlocal: allow cache hits for testing ACME certs (#15023)Tom Proctor1-1/+26
2025-02-27ipn/{ipnlocal,store},kube/kubeclient: store TLS cert and key pair to a Secret...Irbe Krumina1-8/+31
2025-01-27tempfork/acme: add new package for x/crypto package acme fork, moveBrad Fitzpatrick1-1/+1
2025-01-25ipn/ipnlocal: add debug envknob for ACME directory URL (#14771)Tom Proctor1-2/+3
2025-01-24ipn/ipnlocal: include DNS SAN in cert CSR (#14764)Tom Proctor1-3/+4
2025-01-21ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validationBrad Fitzpatrick1-2/+17
2024-07-19cmd/tailscale: add --min-validity flag to the cert command (#12822)Andrew Lytvynov1-14/+50
2024-06-05all: use math/rand/v2 moreMaisem Ali1-2/+2
2024-06-04go.mod,ipn/ipnlocal: update the ACME fork (#12343)Andrew Lytvynov1-2/+2
2024-02-17ipn/ipnlocal: remove ancient transition mechanism for https certsBrad Fitzpatrick1-17/+2
2023-12-05all: fix nilness issuesMatt Layher1-1/+1
2023-11-16ipn/ipnlocal: add c2n method to check on TLS cert fetch statusBrad Fitzpatrick1-1/+7
2023-10-12ipn/ipnlocal: do unexpired cert renewals in the backgroundMaisem Ali1-14/+13
2023-08-17all: use Go 1.21 slices, maps instead of x/exp/{slices,maps}Brad Fitzpatrick1-1/+1
2023-08-07ipn: avoid useless no-op WriteState callsBrad Fitzpatrick1-3/+3
2023-07-27ipn: use tstime (#8597)Claire Wang1-1/+1
2023-07-27ipn/{ipnlocal,localapi}: actually renew certs before expiry (#8731)Andrew Lytvynov1-32/+54
2023-07-13ipn/ipnlocal: add optional support for ACME Renewal Info (ARI) (#8599)Andrew Lytvynov1-9/+68
2023-06-02ipn/ipnlocal: renew certificates based on lifetimeAndrew Dunham1-8/+33
2023-05-05ipn/ipnlocal: bound how long cert fetchher checks for existing DNS recordsBrad Fitzpatrick1-10/+10
2023-03-23ipn/ipnlocal: use atomicfile.WriteFile in certFileStoreMaisem Ali1-3/+4
2023-03-23ipn/ipnlocal: fix cert storage in KubernetesMaisem Ali1-3/+13
2023-03-23ipn/ipnlocal: also store ACME keys in the certStoreMaisem Ali1-26/+62
2023-02-11version: unexport all vars, turn Short/Long into funcsDavid Anderson1-1/+1
2023-02-07ipn/ipnlocal: fix the path for writing cert files (#7203)M. J. Fromberger1-10/+26
2023-02-03ipn/ipnlocal: add support to store certs in k8s secretsMaisem Ali1-20/+103
2023-01-27all: update copyright and license headersWill Norris1-3/+2
2022-11-07ipn/{ipnlocal,localapi}: move most of cert.go to ipnlocalBrad Fitzpatrick1-0/+454