Brad Fitzpatrick b553969b03 ipnlocal: try ACME TLS-ALPN for Funnel renewals ...

Use TLS-ALPN-01 for Funnel certificate renewals only when the node
already has a cached certificate, and fall back to DNS-01 with a fresh
order if the ALPN path is unavailable or fails.

Dynamically advertise acme-tls/1 only while an ACME challenge
certificate is pending, and add client metrics for DNS-01 and
TLS-ALPN-01 start/success/failure paths.

Updates tailscale/corp#41736
Fixes tailscale/corp#42320

Change-Id: I5adc6ea129237f9ef592f84fc1a8953c80bc9d5c
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>

2026-05-27 09:30:23 -07:00

..

auditlog

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

conffile

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

desktop

ipn/desktop: use runtime.Pinner to force heap-allocation of msg

2026-04-07 12:55:11 -05:00

ipnauth

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

ipnext

feature/conn25,ipn/ipnext,ipn/ipnlocal: add ExtraRouterConfigRoutes hook

2026-03-25 19:28:33 -07:00

ipnlocal

ipnlocal: try ACME TLS-ALPN for Funnel renewals

2026-05-27 09:30:23 -07:00

ipnserver

ipn/ipnserver: use peercreds for actor.Username on freebsd (for Taildrive)

2026-03-24 20:35:56 -07:00

ipnstate

ipn/{ipnstate,ipnlocal}: add integer NodeID to PeerStatus

2026-05-22 08:16:55 -07:00

lapitest

types/ptr: deprecate ptr.To, use Go 1.26 new

2026-03-05 20:13:18 -08:00

localapi

ipn/ipnlocal, control/controlclient: process node adds/removes in constant time

2026-05-21 09:26:19 -07:00

policy

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

store

all: use Go 1.26 things, run most gofix modernizers

2026-03-06 13:32:03 -08:00

backend_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

backend.go

ipn/ipnlocal, control/controlclient: process node adds/removes in constant time

2026-05-21 09:26:19 -07:00

conf_test.go

ipn: reject advertised routes with non-address bits set (#18649)

2026-03-20 10:10:43 -07:00

conf.go

ipn: fix the typo causing NoSNAT always set to true (#19110)

2026-03-24 16:41:58 -04:00

doc.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

ipn_clone.go

tailcfg: reintroduce UserProfile.Groups

2026-03-09 11:08:45 +00:00

ipn_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

ipn_view.go

tailcfg: reintroduce UserProfile.Groups

2026-03-09 11:08:45 +00:00

prefs_test.go

cmd/vet: add subtestnames analyzer; fix all existing violations

2026-04-05 15:52:51 -07:00

prefs.go

ipn, cmd/tailscale/cli: allow setting FQDN sans dot as an exit node

2026-04-01 20:42:35 +01:00

serve_expand_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

serve_test.go

cmd/vet: add subtestnames analyzer; fix all existing violations

2026-04-05 15:52:51 -07:00

serve.go

ipn/ipnlocal, control/controlclient: process node adds/removes in constant time

2026-05-21 09:26:19 -07:00

store_test.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00

store.go

all: remove AUTHORS file and references to it

2026-01-23 15:49:45 -08:00