You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/cmd
Brad Fitzpatrick 2691b9f6be tempfork/acme: add new package for x/crypto package acme fork, move
We've been maintaining temporary dev forks of golang.org/x/crypto/{acme,ssh}
in https://github.com/tailscale/golang-x-crypto instead of using
this repo's tempfork directory as we do with other packages. The reason we were
doing that was because x/crypto/ssh depended on x/crypto/ssh/internal/poly1305
and I hadn't noticed there are forwarding wrappers already available
in x/crypto/poly1305. It also depended internal/bcrypt_pbkdf but we don't use that
so it's easy to just delete that calling code in our tempfork/ssh.

Now that our SSH changes have been upstreamed, we can soon unfork from SSH.

That leaves ACME remaining.

This change copies our tailscale/golang-x-crypto/acme code to
tempfork/acme but adds a test that our vendored copied still matches
our tailscale/golang-x-crypto repo, where we can continue to do
development work and rebases with upstream. A comment on the new test
describes the expected workflow.

While we could continue to just import & use
tailscale/golang-x-crypto/acme, it seems a bit nicer to not have that
entire-fork-of-x-crypto visible at all in our transitive deps and the
questions that invites. Showing just a fork of an ACME client is much
less scary. It does add a step to the process of hacking on the ACME
client code, but we do that approximately never anyway, and the extra
step is very incremental compared to the existing tedious steps.

Updates #8593
Updates #10238

Change-Id: I8af4378c04c1f82e63d31bf4d16dba9f510f9199
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
11 months ago
..
addlicense all: fix golangci-lint errors 11 months ago
build-webclient client/web: precompress assets 2 years ago
checkmetrics cmd/checkmetrics: add command for checking metrics against kb 1 year ago
cloner cmd/cloner, cmd/viewer, util/codegen: add support for aliases of cloneable types 1 year ago
connector-gen cmd/connector-gen: add helper tool for wide app connector configurations 2 years ago
containerboot cmd/{k8s-operator,containerboot},kube/kubetypes: parse Ingresses for ingress ProxyGroup (#14583) 11 months ago
derper go.mod: bump depaware, add --internal flag to stop hiding internal packages 11 months ago
derpprobe prober: support filtering regions by region ID in addition to code 11 months ago
dist release/dist/qnap: add qnap target builder 2 years ago
get-authkey cmd,{get-authkey,tailscale}: remove unnecessary scope qualifier from OAuth clients 1 year ago
gitops-pusher cmd/gitops-pusher: default previousEtag to controlEtag (#14296) 1 year ago
hello cmd/hello: link to the Hello KB article (#11022) 2 years ago
k8s-nameserver cmd/k8s-nameserver: fix AAAA record query response (#12412) 2 years ago
k8s-operator tempfork/acme: add new package for x/crypto package acme fork, move 11 months ago
mkmanifest
mkpkg
mkversion
nardump
natc cmd/natc: expose netstack metrics in client metrics in natc 11 months ago
netlogfmt all: use Go 1.22 range-over-int 2 years ago
nginx-auth
pgproxy tsnet: split user facing and backend logging 2 years ago
printdep
proxy-to-grafana cmd/proxy-to-grafana: add flag for alternative control server 1 year ago
sniproxy all: use math/rand/v2 more 2 years ago
speedtest
ssh-auth-none-demo
stunc cmd/stunc: enforce read timeout deadline (#14309) 1 year ago
stund go.mod: bump depaware, add --internal flag to stop hiding internal packages 11 months ago
stunstamp cmd/stunstamp: add protocol context to timeout logs (#13422) 1 year ago
sync-containers all: adjust some build tags for plan9 2 years ago
systray cmd/systray: add cmd/systray back as a small client/systray wrapper 11 months ago
tailscale go.mod: bump depaware, add --internal flag to stop hiding internal packages 11 months ago
tailscaled tempfork/acme: add new package for x/crypto package acme fork, move 11 months ago
testcontrol all: use Go 1.22 range-over-int 2 years ago
testwrapper util/slicesx: add MapKeys and MapValues from golang.org/x/exp/maps 11 months ago
tl-longchain cmd/tl-longchain: tool to re-sign nodes with long rotation signatures 1 year ago
tsconnect build(deps): bump braces from 3.0.2 to 3.0.3 in /cmd/tsconnect (#12468) 11 months ago
tsidp cmd/tsidp: add --dir flag 1 year ago
tsshd
tta cmd/tta: pull out test driver dialing into a type, fix bugs 1 year ago
viewer cmd/viewer,all: consistently use "read-only" instead of "readonly" 11 months ago
vnet tstest/natlab/vnet: add start of IPv6 support 1 year ago
xdpderper all: add test for package comments, fix, add comments as needed 1 year ago