Documentation
¶
Overview ¶
Package acme registers the ACME/TLS-cert feature and implements its associated ipnext.Extension. The extension owns the per-LocalBackend ACME serialization mutex, in-flight cert tracking, the refresh loop's cancel func, and the test-only cert override; together with the cert acquisition logic in this package, it is everything tailscaled needs to obtain and renew TLS certificates via ACME.
In builds without ACME support (js or ts_omit_acme), this package is not linked in; ipn/ipnlocal then exposes only stub wrappers that return errNoCerts or no-op.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type TLSCertKeyReader ¶
TLSCertKeyReader is an interface implemented by state stores where it makes sense to read the TLS cert and key in a single operation that can be distinguished from generic state value reads. Currently this is only implemented by the kubestore.Store, which, in some cases, needs to read cert and key from a non-cached TLS Secret.
type TLSCertKeyWriter ¶
TLSCertKeyWriter is an interface implemented by state stores that can write the TLS cert and key in a single atomic operation. Currently this is only implemented by the kubestore.StoreKube.
Source Files