Brendan Creane a0a79982d4 feature/acme,tstest/acmetest: report the authorization error when an ACME order fails (#21790) ...

When validation fails, WaitOrder returns only the order's status, so
tailscale cert printed "acme: order ... status: invalid" with no reason.
The CA's reason is on the authorization's challenge. Wait on each
authorization before the order and return that error instead.

To test this, move natlab's fake ACME CA to tstest/acmetest, where unit
tests can import it, and teach it tls-alpn-01, a validation hook, and
the "invalid" state a CA reports when validation fails.

Updates #21759

Signed-off-by: Brendan Creane <bcreane@gmail.com>

2026-10-15 07:45:30 -07:00

..

testdata

ipn/ipnlocal, feature/acme: move most remaining cert code into feature/acme

2026-06-29 12:57:22 -07:00

acme.go

feature: add TS_DISABLE_FEATURE to disable features at runtime

2026-09-15 08:37:47 -07:00

c2n_test.go

ipn/ipnlocal, feature/acme: move most remaining cert code into feature/acme

2026-06-29 12:57:22 -07:00

c2n.go

ipn/ipnlocal, feature/acme: move most remaining cert code into feature/acme

2026-06-29 12:57:22 -07:00

cert_test.go

feature/acme: only refresh certs for HTTPS serve entries (#21736)

2026-10-10 09:53:11 -07:00

cert.go

feature/acme,tstest/acmetest: report the authorization error when an ACME order fails (#21790)

2026-10-15 07:45:30 -07:00

certstore.go

cmd/k8s-operator,ipn/store/kubestore,kube/kubetypes: share ACME account key per tailnet

2026-07-27 12:06:41 +01:00

errors.go

ipn/localapi,client/local: honour Retry-After on cert rate-limit (#20315)

2026-07-08 13:34:40 +01:00

issue_test.go

feature/acme,tstest/acmetest: report the authorization error when an ACME order fails (#21790)

2026-10-15 07:45:30 -07:00

refresh.go

feature/acme: only refresh certs for HTTPS serve entries (#21736)

2026-10-10 09:53:11 -07:00