Andrew Lytvynov 463b47a0ab ipn/ipnlocal: include previous cert in new ACME orders (#15595) ...

When we have an old cert that is being rotated, include it in the order.
If we're in the ARI-recommended rotation window, LE should exclude us
from rate limits. If we're not within that window, the order still
succeeds, so there's no risk in including the old cert.

Fixes #15542

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>

2025-04-08 15:37:00 -07:00

..

auditlog

cmd/tailscaled,ipn/{auditlog,ipnlocal},tsd: omit auditlog unless explicitly imported

2025-03-28 10:36:49 -05:00

conffile

ipn/conffile: don't depend on hujson on iOS/Android

2024-10-10 09:14:36 -07:00

desktop

various: keep tailscale connected when Always On mode is enabled on Windows

2025-02-14 16:40:54 -06:00

ipnauth

control/controlclient, ipn: add client audit logging (#14950)

2025-03-12 10:37:03 -04:00

ipnlocal

ipn/ipnlocal: include previous cert in new ACME orders (#15595)

2025-04-08 15:37:00 -07:00

ipnserver

ipn/ipnserver: treat all plan9 safesocket connections as permitted

2025-04-02 07:36:04 -07:00

ipnstate

ipn: update AddPeer to include TaildropTarget (#15091)

2025-02-28 14:17:28 -08:00

localapi

ipn/{ipnserver,localapi},tsnet: use ipnauth.Self as the actor in tsnet localapi handlers

2025-02-04 16:37:30 -06:00

policy

ipn,tailconfig: clean up unreleased and removed app connector service

2023-11-09 22:36:52 -08:00

store

ipn/store/kubestore: skip cache for the write replica in cert share mode (#15417)

2025-03-25 23:25:29 +00:00

backend.go

ipn: declare NotifyWatchOpt consts without using iota

2025-01-04 18:43:27 -08:00

conf.go

ipn: ensure that conffile is source of truth for advertised services. (#15361)

2025-03-20 14:40:36 +00:00

doc.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

ipn_clone.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

ipn_test.go

all: do not depend on the testing package

2024-05-24 05:23:36 -07:00

ipn_view.go

ipn: generate LoginProfileView and use it instead of *LoginProfile where appropriate

2025-01-30 18:12:54 -06:00

prefs_test.go

types/persist: remove Persist.LegacyFrontendPrivateMachineKey

2025-01-27 22:01:50 +00:00

prefs.go

ipn: use slices.Equal in another spot

2025-04-08 15:22:31 -07:00

serve_test.go

ipn: [serve] warn that foreground funnel won't work if shields are up (#14685)

2025-01-19 19:00:21 +00:00

serve.go

tailcfg: add ServiceName

2025-01-22 15:27:46 -05:00

store_test.go

ipn: avoid useless no-op WriteState calls

2023-08-07 08:44:24 -07:00

store.go

ipn: add comment about thread-safety to StateStore

2024-03-06 12:42:18 -06:00