tailscale/ipn
Andrew Dunham 07eacdfe92 ipn/ipnlocal: renew certificates based on lifetime
Instead of renewing certificates based on whether or not they're expired
at a fixed 14-day period in the future, renew based on whether or not
we're more than 2/3 of the way through the certificate's lifetime. This
properly handles shorter-lived certificates without issue.

Updates #8204

Signed-off-by: Andrew Dunham <andrew@du.nham.ca>
Change-Id: I5e82a9cadc427c010d04ce58c7f932e80dd571ea
2023-06-02 12:36:32 -04:00
..
ipnauth all: update copyright and license headers 2023-01-27 15:36:29 -08:00
ipnlocal ipn/ipnlocal: renew certificates based on lifetime 2023-06-02 12:36:32 -04:00
ipnserver tsd: add package with System type to unify subsystem init, discovery 2023-05-04 14:21:59 -07:00
ipnstate tka: provide authority StateID in NetworkLockStatus response (#8200) 2023-05-24 13:36:25 -07:00
localapi all: avoid repeated default interface lookups 2023-04-20 15:46:01 -07:00
policy ipn: prefer allow/denylist terminology 2023-04-04 08:02:50 -07:00
store ipn/store/awsstore: persist state with intelligent tiering 2023-04-24 14:35:13 -04:00
backend.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
doc.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
fake_test.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
ipn_clone.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
ipn_view.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
prefs.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
prefs_test.go all: update copyright and license headers 2023-01-27 15:36:29 -08:00
serve.go cmd/tailscale/cli: do not allow turning Funnel on while shields-up (#7770) 2023-04-04 22:20:27 -04:00
serve_test.go ipn: add Funnel port check from nodeAttr 2023-03-11 11:20:52 -08:00
store.go ipn/store: add support for stores to hook into a custom dialer 2023-03-29 16:35:46 -07:00