tailscale/ipn/ipnlocal
Andrew Dunham 07eacdfe92 ipn/ipnlocal: renew certificates based on lifetime
Instead of renewing certificates based on whether or not they're expired
at a fixed 14-day period in the future, renew based on whether or not
we're more than 2/3 of the way through the certificate's lifetime. This
properly handles shorter-lived certificates without issue.

Updates #8204

Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Change-Id: I5e82a9cadc427c010d04ce58c7f932e80dd571ea
2023-06-02 12:36:32 -04:00
..
testdata ipn/ipnlocal: fix the path for writing cert files (#7203) 2023-02-07 14:34:04 -08:00
c2n.go net/sockstats: expose debug info 2023-04-19 14:33:12 -07:00
cert_js.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
cert_test.go ipn/ipnlocal: renew certificates based on lifetime 2023-06-02 12:36:32 -04:00
cert.go ipn/ipnlocal: renew certificates based on lifetime 2023-06-02 12:36:32 -04:00
dnsconfig_test.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
expiry_test.go ci: add more lints (#7909) 2023-04-19 21:54:19 -04:00
expiry.go various: add golangci-lint, fix issues (#7905) 2023-04-17 18:38:24 -04:00
local_test.go tsd: add package with System type to unify subsystem init, discovery 2023-05-04 14:21:59 -07:00
local.go ipn/ipnlocal: add NodeKey func to return the public node NodeKey 2023-05-05 14:22:59 -07:00
loglines_test.go tsd: add package with System type to unify subsystem init, discovery 2023-05-04 14:21:59 -07:00
network-lock_test.go various: add golangci-lint, fix issues (#7905) 2023-04-17 18:38:24 -04:00
network-lock.go tka: provide authority StateID in NetworkLockStatus response (#8200) 2023-05-24 13:36:25 -07:00
peerapi_h2c.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
peerapi_macios_ext.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
peerapi_test.go ipn/ipnlocal: drop not required StateKey parameter 2023-01-30 17:58:55 -08:00
peerapi.go tsd: add package with System type to unify subsystem init, discovery 2023-05-04 14:21:59 -07:00
profiles_notwindows.go ipn/ipnlocal, util/winutil/policy: modify Windows profile migration to load legacy prefs from within tailscaled 2023-04-03 14:41:46 -07:00
profiles_test.go ipn/ipnlocal: reenable profile tests on Windows 2023-04-26 11:33:38 -07:00
profiles_windows.go ipn/ipnlocal: add more logging during profile migration 2023-06-01 21:00:55 -04:00
profiles.go ipn/ipnlocal: add more logging during profile migration 2023-06-01 21:00:55 -04:00
serve_test.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
serve.go tsd: add package with System type to unify subsystem init, discovery 2023-05-04 14:21:59 -07:00
ssh_stub.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
ssh_test.go ipn/ipnlocal: drop not required StateKey parameter 2023-01-30 17:58:55 -08:00
ssh.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
state_test.go tsd: add package with System type to unify subsystem init, discovery 2023-05-04 14:21:59 -07:00