codinget
143581c955
Enable ACME TLS certificates on js/wasm by dropping the !js build tag from cert.go and routing storage through the state store. Add getCert, listenTLS, and setFunnel WASM bindings with a combinedTLSListener that merges Funnel ingress and direct tailnet connections. Notify the control plane immediately after serve config changes to accelerate Funnel DNS provisioning. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
46 lines
1.0 KiB
Go
46 lines
1.0 KiB
Go
// Copyright (c) Tailscale Inc & contributors
|
|
// SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
//go:build ts_omit_acme
|
|
|
|
package ipnlocal
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"io"
|
|
"net/http"
|
|
"time"
|
|
)
|
|
|
|
func init() {
|
|
RegisterC2N("GET /tls-cert-status", handleC2NTLSCertStatusDisabled)
|
|
}
|
|
|
|
var errNoCerts = errors.New("cert support not compiled in this build")
|
|
|
|
type TLSCertKeyPair struct {
|
|
CertPEM, KeyPEM []byte
|
|
}
|
|
|
|
func (b *LocalBackend) GetCertPEM(ctx context.Context, domain string) (*TLSCertKeyPair, error) {
|
|
return nil, errNoCerts
|
|
}
|
|
|
|
var errCertExpired = errors.New("cert expired")
|
|
|
|
type certStore interface{}
|
|
|
|
func getCertPEMCached(cs certStore, domain string, now time.Time) (p *TLSCertKeyPair, err error) {
|
|
return nil, errNoCerts
|
|
}
|
|
|
|
func (b *LocalBackend) getCertStore() (certStore, error) {
|
|
return nil, errNoCerts
|
|
}
|
|
|
|
func handleC2NTLSCertStatusDisabled(b *LocalBackend, w http.ResponseWriter, r *http.Request) {
|
|
w.Header().Set("Content-Type", "application/json")
|
|
io.WriteString(w, `{"Missing":true}`) // a minimal tailcfg.C2NTLSCertInfo
|
|
}
|