commit b13fc1fd382d01861b16b2e6474487d3d4d27f20
author Alex Vaghin <ddos@google.com> Thu Aug 25 09:06:35 2016 +0200
committer Alex Vaghin <ddos@google.com> Tue Aug 30 15:40:08 2016 +0000
tree b2d5f2eefe4c9e531c3ba53db737438f6db3301e
parent 351dc6a5bf92a5f2ae22fadeee08eb6a45aa2d93

acme: take a user provided key in TLSSNIxChallengeCert

Some systems can only operate with a certain key type, for instance RSA,
which makes it impossible for them to use Client provided certificates
to fulfill tls-sni-x challenges since TLSSNIxChallengeCert methods
of the Client always generate ECDSA-based certificates.

At the same time we want to keep using ECDSA-based certificates
in autocert.Manager.

This change allows for a user supplied key when generating tls-sni-x
challenge certficates.

Change-Id: I04f617ff99794a71ef23ad259cb333839f13ae1c
Reviewed-on: https://go-review.googlesource.com/27750
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>