Create common GenerateCSR and GenerateTemplate methods for creating Certificate/CertificateRequest

Enable vendor pruning

This adds support for the new challenge type, as described in
https://tools.ietf.org/html/draft-...

Add Richard Wall to OWNERS file

Vault issuer MUST USE the vault 'sign' endpoint

issuer/acme/*: log namespaces for resources

The newer 'fullname' helper function automatically avoids name duplication. This change updates ...

A var isn't needed and a const is what the upstream (Go 1.10+) version
it's copying is.

Change-...

Updates golang/go#22066

Change-Id: I7eb6a60deb6680003245815760e2ce6a8f7d8b15
Reviewed-on: https...

Improve logs for CloudDNS service account errors

Fixes golang/go#22064

Change-Id: Icb3f5b2c1967630a3dcbd9661b3492f5d3acc654
Reviewed-on: https:/...

GetCertificate has all the information it needs to know if a client
supports ECDSA in ClientHell...

Update labels.yaml

Add note about Google Group to readme

Fix links in pull request template

Support for custom dns settings

This allows HTTP / DNS challenges to be self checked in AWS setups in
which both a public and pr...

There's been some confusion about failed request retries.
Rightfully so: some requests are retri...

Fix references to other documentation sections.

Most implementations, including this one, consider the private key to be
the concatenation of th...

acmesolver: Run as non-root

It's useful to know what namespace is being operated on, so log
namespaces all over the place!

¯\_(ツ)_/¯

If we can't find the secret, the user should probably also know what
namespace we looked in.

xr...

This environment variable can be use to add some flags to the docker
build command.

For example...

vault: fix panic when vault is sealed or uninitialized

Fixed a typo in error msg.

acmesolver won't run in a namespace with a restrictive PSP
(Pod Security Policy)[1] without this...

Fixes a bug introduced in golang.org/cl/100078 where incorrect
ACME client was used, causing nil...

Package users can now provide extra CSR extensions
to serve certificates with desired properties...

Use https docs URL in chart NOTES.txt

Fix the following failure on iOS:

--- FAIL: TestMakeRawState (0.00s)
terminal_test.go:332: fai...

Bump chart and manifests for v0.3.0 release

Output a single file instead of directories for static manifests

add pod labels

We now keep track of pending authorization requests during verify() and
defer the asynchronous r...

Previously if you created a new Entity then ran `Serialize` _before_ running `SerializePrivate`,...

These are triggering vet errors when vendored into std.

Change-Id: Ied8158941d176129c76509acff7...

Increase the number of test vectors in this package to provide
better validation of new SIMD imp...

SIMD implementation based the on the algorithm outlined in:
NEON crypto, Daniel J. Bernstein and...

Forgotten file from CL 112635.

The integration tests didn't catch this because the integration ...

The extra goroutines were distracting while debugging something else,
especially as I wasn't usi...

The code (especially assembly implementations) should be able to
handle this scenario.

Change-I...

Improve logging in the case where the Service Account Secret is
loaded, but the Key is not found...

Add leaderElection.namespace option to helm chart

Update acme dns01 tutorial with reference to wildcard domains

IssuerConfig.Vault typo fix

The tag matches the platforms defined in util*.go
where the most tested logic is defined.

Chang...

Change-Id: I5c8d603cc3ec844b8d44e51b3138bcf16e95c7fc
Reviewed-on: https://go-review.googlesource...

Update overview diagram

Add document on upgrading from cert-manager 0.2 to 0.3

Address review feedback

Fix code-blocks

Update Cloudflare provider to be idempotent when calling Present

Add clusterResourceNamespace option to Helm chart

Set Issuer ready condition to false if ACMEv1 endpoints are used

rename fields in Vault appRole credentials

Fix panic in shouldAttemptValidation

https://golang.org/cl/111416 made vet spot this new issue by recognizing
the len() call as side-...

Keccak uses a different domain separation byte as the NIST-
standardized SHA-3 hashing function....

Change-Id: I6eb5db30df9bc1c4b3c4124c9cdd3d504d33ad9d
GitHub-Last-Rev: 1f585c4bf946a3241f8c38e1e9...

Changes function name from "testUnalignedWrites" to "TestUnalignedWrites"
which makes "go test" ...

Fix ingress-shim cli flags

When c = ∞, z = 0 and 0 does not have a modular inverse, triggering
undefined behavior (recently...