Documentation
¶
Overview ¶
Package managedcert issues and renews TLS certificates via ACME DNS-01 using a workspace's connected DNS provider, storing the result in the workspace Certificates (Source=acme). It orchestrates: the platform ACME account, the DNS-01 solver (backed by the libdns provider), and the certificate row lifecycle. Goma still serves the cert through the existing custom-cert path.
Index ¶
Constants ¶
This section is empty.
Variables ¶
Functions ¶
This section is empty.
Types ¶
type Service ¶
type Service struct {
// contains filtered or unexported fields
}
Service issues + renews managed certificates.
func NewService ¶
func NewService( certs *certificate.Service, dnsProviders *dnsprovider.Service, domains *repositories.DomainRepository, accounts *repositories.ACMEAccountRepository, email, caDirURL string, renewWithin time.Duration, ) *Service
func (*Service) RenewDue ¶
func (s *Service) RenewDue()
RenewDue re-issues every ACME auto-renew certificate within the renew window. Driven by a cron; runs issuances sequentially (there are few).
func (*Service) Request ¶
func (s *Service) Request(workspaceID, domainID uint, name string, includeWildcard, autoRenew bool) (*models.Certificate, error)
Request begins issuing a managed certificate for a verified, provider-connected domain (and optionally its wildcard). It creates the certificate row in the "issuing" state and runs issuance in the background, returning the row immediately; callers poll the row's status.