golang.org/x/crypto/acme/autocert

New Issue

Manager.GetCertificate should check host policy before consulting cacheNeedsFixSecurity

#71199 opened 11 months ago by rolandshoemaker

handle short cert lifetimesFixPendingProposalProposal-AcceptedProposal-Crypto

#64997 opened 2 years ago by mjl-

Tell users that Manager.TLSConfig() returns a config that allows TLS 1.0FrozenDueToAgeProposal

#63890 opened 2 years ago by 1f604

provide stop/cancel feature to the managerFrozenDueToAgeProposal

#63706 opened 2 years ago by mitar

add mechanism for providing a private key for a new certificateProposalProposal-Crypto

#63124 opened 2 years ago by mjl-

NewOrder request did not include a SAN short enough to fit in CNNeedsInvestigation

#53194 opened 3 years ago by anacrolix

httpTokenCacheKey allows limited directory traversal on windowsFrozenDueToAgeOS-WindowsSecurity

#53082 opened 3 years ago by rolandshoemaker

TestGetCertificate failure with “multiple accounts are not implemented”FrozenDueToAgeNeedsInvestigationSecurity

#52494 opened 3 years ago by bcmills

renewal test failures due to connection errors on windows/arm64NeedsInvestigationOS-Windowsarch-arm64

#51080 opened 3 years ago by bcmills

add Manager.StapleOCSPFeatureRequestProposalProposal-AcceptedProposal-Crypto

#51064 opened 3 years ago by mcrute

support External Account Binding (EAB) tokensFrozenDueToAgeNeedsInvestigation

#48809 opened 4 years ago by benburkert

seems brokenFrozenDueToAgeNeedsInvestigation

#44894 opened 4 years ago by zxdev

error with github.com/letsencrypt/pebbleFrozenDueToAgeNeedsFix

#39746 opened 5 years ago by trevordixon

new certificate rejected by Chrome client for 1h if client's clock is behind.NeedsInvestigation

#39638 opened 5 years ago by h8liu

Error http: TLS handshake error from <ip>:<port>: Head "": unsupported protocol scheme "" trying to connect to letsencrypt's pebbleNeedsInvestigationWaitingForInfo

#39284 opened 5 years ago by tofsme

Consider storing certificates as "*.pem" in DirCacheNeedsInvestigation

#37354 opened 5 years ago by arp242

TestGetCertificate* broken at CL 204177FrozenDueToAgeNeedsInvestigationSoon

#37160 opened 5 years ago by bcmills

add hooks for transaction locksFeatureRequestNeedsDecision

#36818 opened 5 years ago by rgooch

Manager.RenewBefore must be >1hourNeedsFix

#36548 opened 6 years ago by leitzler

sometimes uses AuthzURLs slice from client.WaitOrder rather than client.AuthorizeOrderFrozenDueToAgeNeedsFix

#35225 opened 6 years ago by dmitshur

Enable custom port / IP bindingFrozenDueToAgeProposalProposal-Crypto

#29540 opened 7 years ago by axxelG

remove SNI supportFrozenDueToAgeNeedsFix

#28370 opened 7 years ago by bradfitz

verify the beginning time of an issued cert is not necessaryNeedsInvestigation

#28201 opened 7 years ago by snowie2000

Expose Subject Alternative Names in manager.GetCertificateFeatureRequestNeedsInvestigation

#28158 opened 7 years ago by anurag

Safari cannot access the server when enabling http/2 by defaultFrozenDueToAgeNeedsInvestigation

#27651 opened 7 years ago by mkfsn

allow caller to supply a ListenerFrozenDueToAgeWaitingForInfo

#26780 opened 7 years ago by kr

Registration Update FailsFrozenDueToAge

#26251 opened 7 years ago by blitzrk

NewListener does not acquire new certificatesFrozenDueToAge

#25901 opened 7 years ago by FlorianUekermann

revokePending with nil clientFrozenDueToAge

#25581 opened 7 years ago by immesys

clarify usage of (*Manager).GetCertificateDocumentationFrozenDueToAge

#24894 opened 7 years ago by gertcuykens

make hybrid ecc-rsa certificates possibleFrozenDueToAge

#23698 opened 7 years ago by phuslu

Certificate renewal does not check that the cache was updatedFrozenDueToAge

#23569 opened 8 years ago by morgabra

client should deactivate authzs that failed in a non-recoverable casesFrozenDueToAgeNeedsFix

#23426 opened 8 years ago by costela

Manager should support DNS-01 verificationProposalProposal-Crypto

#23198 opened 8 years ago by winteraz

Update local state with new cert on failed renewalFrozenDueToAgeNeedsFix

#22960 opened 8 years ago by chrj

handle RSA-only clients betterFrozenDueToAgeNeedsFixhelp wanted

#22066 opened 8 years ago by rsc

Document key generation with a non-nil acme.ClientDocumentationFrozenDueToAge

#22064 opened 8 years ago by takeyourhatoff

Support http-01 challenge

#21890 opened 8 years ago by wyattjoh

Hooks for "CertAcquired", "CertRenewed"NeedsInvestigation

#21224 opened 8 years ago by prologic

expose cacheDir functionFrozenDueToAge

#21151 opened 8 years ago by bradrydzewski

NewListener does not enable HTTP2.FrozenDueToAgeNeedsFix

#20572 opened 8 years ago by johanbrandhorst

implement HTTP-01 challenge responsesFrozenDueToAge

#20049 opened 8 years ago by dgpc

expired cached cert never renewedFrozenDueToAgeNeedsFix

#20035 opened 8 years ago by x1ddos

reason acme challenge fails to complete is not logged FrozenDueToAge

#19800 opened 8 years ago by groob

extend RenewBefore to 21 daysFrozenDueToAge

#19616 opened 8 years ago by kennygrant

support ForceRSA as a per domain optionFrozenDueToAge

#19265 opened 8 years ago by phuslu

assume default domain for non-SNI connections?NeedsInvestigation

#18785 opened 9 years ago by rsc

Persistent cache results in stuck configuration if TOS is not always acceptedNeedsInvestigation

#18433 opened 9 years ago by taralx

support configurable CSR extensionsFrozenDueToAgeNeedsFix

#17801 opened 9 years ago by nhooyr

lock usage around certState is bogus and error proneNeedsInvestigation

#17749 opened 9 years ago by niemeyer

no way to generate RSA certificatesFrozenDueToAge

#17744 opened 9 years ago by niemeyer

failed cert creation is never retriedFrozenDueToAgeNeedsFix

#17740 opened 9 years ago by niemeyer

enforce OCSP must stapleFrozenDueToAge

#17390 opened 9 years ago by nhooyr

Always uses ecdsa as key for client.CreateCertFrozenDueToAge

#17385 opened 9 years ago by danilobuerger

acme: identifier authorization failedFrozenDueToAge

#17263 opened 9 years ago by stapelberg

Manager.Client uses internal typeFrozenDueToAge

#16938 opened 9 years ago by rogpeppe

Certificate renewal brokenFrozenDueToAge

#16851 opened 9 years ago by takeyourhatoff