certinel
certinel copied to clipboard
cloudflare
A sentry for zero-hit TLS certificate changes in Go
calling fswatcher.New when the OS has too many files currently open currently results in `fswatcher: error creating watcher: too many open files`, which can cause the top level application to...
Providing metrics for the watched certificate not before/not after times would be helpful for alerts to ensure certificates are being renewed and reloaded by the application. This functionality could be...
It was previously difficult to determine if a certinel implementation was properly detecting changes and reloading certificates. This lack of observability has made some teams uneasy of relying on certinel...
When building the internal service, the rootCA will be expired in a short time. It would be better to provide an extension to auto reload the certificate. Currently the code...
Go 1.25 introduces the "testing/synctest" package to test concurrent code. Part of the new synctest behavior is a "time bubble" where time is moved forward whenever all goroutines in the...
Metadata
Owner
Metadata
A sentry for zero-hit TLS certificate changes in Go