Also fix AP provisioning in case of empty subject list (persist loaded
module on struct, much like Issuers, to surive reprovisioning).
And implement start of HTTP cert getter, still WIP.

Co-authored-by: Francis Lavoie <lavofr@gmail.com>

bradfitz added a commit to tailscale/tailscale that referenced this pull request

Jan 25, 2022

… access
So you can run Caddy etc as a non-root user and let it have access to
get certs.
Updates caddyserver/caddy#4541
Change-Id: Iecc5922274530e2b00ba107d4b536580f374109b
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>

Merged

bradfitz added a commit to tailscale/tailscale that referenced this pull request

Jan 25, 2022

… access
So you can run Caddy etc as a non-root user and let it have access to
get certs.
Updates caddyserver/caddy#4541
Change-Id: Iecc5922274530e2b00ba107d4b536580f374109b
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>

bradfitz added a commit to tailscale/tailscale that referenced this pull request

Jan 25, 2022

… access
So you can run Caddy etc as a non-root user and let it have access to
get certs.
Updates caddyserver/caddy#4541
Change-Id: Iecc5922274530e2b00ba107d4b536580f374109b
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>

bradfitz added a commit to tailscale/tailscale that referenced this pull request

Jan 25, 2022

… access
So you can run Caddy etc as a non-root user and let it have access to
get certs.
Updates caddyserver/caddy#4541
Change-Id: Iecc5922274530e2b00ba107d4b536580f374109b
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>

Open

And use reuse CertMagic's PEM functions for private keys.

Closed

Tailscale does its own caching and we don't need the added complexity...
for now, at least.

- Option to disable cert automation in auto HTTPS
- Support multiple cert managers
- Remove cache feature from cert manager modules
- Minor improvements to auto HTTPS logging

Only for domains ending in .ts.net.
I think this is really cool!

Closed

Open