Set up scheduled work queue for certificate renewals

Initial support for CloudDNS

Rewrite control loops

Use GetConsoleMode, SetConsoleMode and GetConsoleScreenBufferInfo and
the corresponding types an...

Verify operates only on public data and thus is not constant-time. The
use of a constant-time fu...

The existing implementation checks to see if the session key size is a
multiple of the cipher bl...

Fixes golang/go#21104

Change-Id: I59054f9e2beed8a0c7efd513eb84795dc0308353
Reviewed-on: https:/...

Use the TCGETS/TCSETS and TIOCGETA/TIOCSETA definitions from x/sys/unix
instead of manually decl...

This change also moves CertOption and its relevant types and
functions from acme.go to types.go....

Change-Id: I264fc3e3e441d6e5ff7c5aa624eee1018cf9e4de
Reviewed-on: https://go-review.googlesource...

Change-Id: Ib89c0a4e46c9a7f90a53f21b06fcddfdf13c7fd9
Reviewed-on: https://go-review.googlesource...

Mistake from https://golang.org/cl/49030 (noted in comments after submission)

Change-Id: Id1c94...

Change-Id: I221d65fd495594ee409b999c7e0f0407b2331ac2
Reviewed-on: https://go-review.googlesource...

Move the README to README.md so Gerrit can render it; currently
Gerrit only renders files named ...

Output for sha3.ShakeSum256 and sha3.NewShake256 examples is now
verified.

Change-Id: I31e186a0...

cert can never be nil here. The statement was incorrectly moved in
e1a4589.

Change-Id: I1fb2aa0...

Change-Id: I34cc1a5a8c59c5e4c0313d7a41c3f31cdbad9e98
Reviewed-on: https://go-review.googlesource...

This CL implements the BLAKE2X, a extensible-output function (XOF), on
top of BLAKE2b. BLAKE2X i...

The writing side would generate a maximum of 19 bytes of padding, so
the reading side erroneousl...

Change-Id: Iea55e6397c49046d7d3e0eb66a392f1779d91802
Reviewed-on: https://go-review.googlesource...

This CL implements BLAKE2X, a extensible-output functions (XOF) on top of BLAKE2s.
BLAKE2x is de...

Change-Id: I6aebbd0c351c1dcc27504f5a6fe02bfe7ebe805b
Reviewed-on: https://go-review.googlesource...

Change-Id: I4d6cab266410a8c7960073665eddf8935693087f
Reviewed-on: https://go-review.googlesource...

Change-Id: I4d685309e375fd0bb50d1d32c60ac48a7f2515fc
Reviewed-on: https://go-review.googlesource...

Change-Id: I5de781adf4071158404da6252d06e4c2c33f298b
Reviewed-on: https://go-review.googlesource...

Many websites now support HTTPS that may not at the time the code was
committed; let's use the H...

Fixes golang/go#20781

Change-Id: Iae42fff3c9b0b9984509e44a92f9bc99a1a12470
Reviewed-on: https:/...

Change-Id: I8ffee4dc712091e424b83a9f5a3cc2a6724abefc
Reviewed-on: https://go-review.googlesource...

The Permissions struct should be used to pass information from
authentication callback to server...

Initial results on an Ivy Bridge system for reference:

BenchmarkSeal8Bytes-8 5000000 ...

Enables HTTP/2 on any servers used with the autocert listener
by setting "h2" in NextProtos of t...

ssh package doesn't provide way to parse private keys with passphrase.

Fixes golang/go#18692

C...

These largely follow the pattern laid out in the secretbox example
file. Hopefully they should d...

Although a 128-bit digest provides little collision resistance it can be
used as a MAC, as found...

ParseResponseForCert would previously complain about an invalid hash OID
if the response contain...

This change does two things:
1. Fix a length checking bug in the Decrypt function.
2. Use bina...

Change-Id: Iffbed7e16a8bb32c5ff7c393f3b6ad7dcffc69ac
Reviewed-on: https://go-review.googlesource...

SSH host certificates are expected to contain hostnames only,
not "host:port" format.

This chan...

The bcrypt implementation must append a zero byte to the user provided key
to be compatible to C...

Change-Id: I3ac9dc7bf1c1c6ff39b3385cbf965dfb57f8327a
Reviewed-on: https://go-review.googlesource...

Fix self-assignment of useAVX variable. (vet warning)

Change-Id: I4194d7640f17cbf71dae27ce271d6...

Otherwise callers are forced to serialize access to the ServerConfig.

Change-Id: Id36f4d2877ea2...

Follow-up to https://golang.org/cl/42497

Change-Id: I638e7ba5e924a74ce5318e4b50fb18082fd1a43f
R...

Change-Id: I810c8dcc90c056d7fa66bba59c0936f54aabdfc7
Reviewed-on: https://go-review.googlesource...

Dialing the 0.0.0.0 address (as returned by net.Addr().String() for a
net.Listen("tcp", ":1") ad...

Change-Id: I150c5e0453b0fa3457d4786fe90901a54e216b02
Reviewed-on: https://go-review.googlesource...

Change-Id: Iad24fed7cec998e02620ec0eb61658786156ba41
Reviewed-on: https://go-review.googlesource...

This change makes the Manager try creating a certificate
again, after a previously unsuccessful ...

This is a breaking change.

This adds a new hostkey callback which takes the hostname field
rest...

Spotted it thanks to a proposal in
https://github.com/golang/go/issues/19727.

Change-Id: I389a3...

This change exposes a function to extract rate limit duration
from a client error using Retry-Af...

This provides acme users with more insights into authorization failures.

Updates golang/go#1980...

A cached cert data may be corrupted or simply contain an expired
certificate, which results in G...

The correct curve name for ES512 signatures is P-521, not P-512.
Author: Matthew Endsley <mendsl...

Without this, autocert will panic with an unhelpful nil pointer inside
the acme client.

Reorgan...

terminal.MakeRaw
terminal.Restore
terminal.GetState
terminal.GetSize

Fixes gola...