tree b0ae4e416a4021c896035c927b9264d8552c4753
parent e04a8579fee6e9c8fa0b5a41b7d9db85262e2f57
author Filippo Valsorda <filippo@golang.org> 1643236145 -0500
committer Roland Shoemaker <roland@golang.org> 1643240631 +0000

acme/autocert: renew Let's Encrypt certificates likely to get revoked

Let's Encrypt is revoking all certificates verified with TLS-ALPN-01
beofre January 26th due to a compliance issue. Detect them and force a
renewal.

Also, fix the tests which were not testing if expired certificates were
renewed anymore, as the test certificates were always invalid due to not
having SANs.

Change-Id: If9d0632b2edfe0b7fb70f6cfd7e65e46e2d047dc
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/381114
Trust: Filippo Valsorda <filippo@golang.org>
Run-TryBot: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>