| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-04-08 | ipn/ipnlocal: include previous cert in new ACME orders (#15595) | Andrew Lytvynov | 1 | -4/+15 |
| 2025-03-13 | ipn/ipnlocal, envknob: make it possible to configure the cert client to act i... | Irbe Krumina | 1 | -3/+34 |
| 2025-03-11 | ipn/ipnlocal: allow cache hits for testing ACME certs (#15023) | Tom Proctor | 1 | -1/+26 |
| 2025-02-27 | ipn/{ipnlocal,store},kube/kubeclient: store TLS cert and key pair to a Secret... | Irbe Krumina | 1 | -8/+31 |
| 2025-01-27 | tempfork/acme: add new package for x/crypto package acme fork, move | Brad Fitzpatrick | 1 | -1/+1 |
| 2025-01-25 | ipn/ipnlocal: add debug envknob for ACME directory URL (#14771) | Tom Proctor | 1 | -2/+3 |
| 2025-01-24 | ipn/ipnlocal: include DNS SAN in cert CSR (#14764) | Tom Proctor | 1 | -3/+4 |
| 2025-01-21 | ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation | Brad Fitzpatrick | 1 | -2/+17 |
| 2024-07-19 | cmd/tailscale: add --min-validity flag to the cert command (#12822) | Andrew Lytvynov | 1 | -14/+50 |
| 2024-06-05 | all: use math/rand/v2 more | Maisem Ali | 1 | -2/+2 |
| 2024-06-04 | go.mod,ipn/ipnlocal: update the ACME fork (#12343) | Andrew Lytvynov | 1 | -2/+2 |
| 2024-02-17 | ipn/ipnlocal: remove ancient transition mechanism for https certs | Brad Fitzpatrick | 1 | -17/+2 |
| 2023-12-05 | all: fix nilness issues | Matt Layher | 1 | -1/+1 |
| 2023-11-16 | ipn/ipnlocal: add c2n method to check on TLS cert fetch status | Brad Fitzpatrick | 1 | -1/+7 |
| 2023-10-12 | ipn/ipnlocal: do unexpired cert renewals in the background | Maisem Ali | 1 | -14/+13 |
| 2023-08-17 | all: use Go 1.21 slices, maps instead of x/exp/{slices,maps} | Brad Fitzpatrick | 1 | -1/+1 |
| 2023-08-07 | ipn: avoid useless no-op WriteState calls | Brad Fitzpatrick | 1 | -3/+3 |
| 2023-07-27 | ipn: use tstime (#8597) | Claire Wang | 1 | -1/+1 |
| 2023-07-27 | ipn/{ipnlocal,localapi}: actually renew certs before expiry (#8731) | Andrew Lytvynov | 1 | -32/+54 |
| 2023-07-13 | ipn/ipnlocal: add optional support for ACME Renewal Info (ARI) (#8599) | Andrew Lytvynov | 1 | -9/+68 |
| 2023-06-02 | ipn/ipnlocal: renew certificates based on lifetime | Andrew Dunham | 1 | -8/+33 |
| 2023-05-05 | ipn/ipnlocal: bound how long cert fetchher checks for existing DNS records | Brad Fitzpatrick | 1 | -10/+10 |
| 2023-03-23 | ipn/ipnlocal: use atomicfile.WriteFile in certFileStore | Maisem Ali | 1 | -3/+4 |
| 2023-03-23 | ipn/ipnlocal: fix cert storage in Kubernetes | Maisem Ali | 1 | -3/+13 |
| 2023-03-23 | ipn/ipnlocal: also store ACME keys in the certStore | Maisem Ali | 1 | -26/+62 |
| 2023-02-11 | version: unexport all vars, turn Short/Long into funcs | David Anderson | 1 | -1/+1 |
| 2023-02-07 | ipn/ipnlocal: fix the path for writing cert files (#7203) | M. J. Fromberger | 1 | -10/+26 |
| 2023-02-03 | ipn/ipnlocal: add support to store certs in k8s secrets | Maisem Ali | 1 | -20/+103 |
| 2023-01-27 | all: update copyright and license headers | Will Norris | 1 | -3/+2 |
| 2022-11-07 | ipn/{ipnlocal,localapi}: move most of cert.go to ipnlocal | Brad Fitzpatrick | 1 | -0/+454 |