You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/ipn
Andrew Dunham 07eacdfe92 ipn/ipnlocal: renew certificates based on lifetime
Instead of renewing certificates based on whether or not they're expired
at a fixed 14-day period in the future, renew based on whether or not
we're more than 2/3 of the way through the certificate's lifetime. This
properly handles shorter-lived certificates without issue.

Updates #8204

Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Change-Id: I5e82a9cadc427c010d04ce58c7f932e80dd571ea
3 years ago
..
ipnauth all: update copyright and license headers 3 years ago
ipnlocal ipn/ipnlocal: renew certificates based on lifetime 3 years ago
ipnserver tsd: add package with System type to unify subsystem init, discovery 3 years ago
ipnstate tka: provide authority StateID in NetworkLockStatus response (#8200) 3 years ago
localapi all: avoid repeated default interface lookups 3 years ago
policy ipn: prefer allow/denylist terminology 3 years ago
store ipn/store/awsstore: persist state with intelligent tiering 3 years ago
backend.go all: update copyright and license headers 3 years ago
doc.go all: update copyright and license headers 3 years ago
fake_test.go all: update copyright and license headers 3 years ago
ipn_clone.go all: update copyright and license headers 3 years ago
ipn_view.go all: update copyright and license headers 3 years ago
prefs.go all: update copyright and license headers 3 years ago
prefs_test.go all: update copyright and license headers 3 years ago
serve.go cmd/tailscale/cli: do not allow turning Funnel on while shields-up (#7770) 3 years ago
serve_test.go ipn: add Funnel port check from nodeAttr 3 years ago
store.go ipn/store: add support for stores to hook into a custom dialer 3 years ago