crypto/acme
Alex Vaghin a4c6cb3142 acme: try to fetch nonce from directory first
The change should reduce resource quota consumed by the client overall.

Instead of sending HEAD to an ACME resource URL to get a new nonce,
the Client will now try to fetch it from the Directory URL first
and only then from the ACME resource URL if the former fails.

This builds up on an abandoned https://golang.org/cl/34623,
only this time with a fallback to the original behaviour.

Change-Id: I6e75c0e524c4bc751f3a651b290c0ac2493e0628
Reviewed-on: https://go-review.googlesource.com/c/162057
Run-TryBot: Alex Vaghin <ddos@google.com>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2019-02-19 17:22:22 +00:00
..
autocert acme/autocert: include rejected hostname in TLS handshake error when host not configured 2018-10-24 17:11:44 +00:00
acme.go acme: try to fetch nonce from directory first 2019-02-19 17:22:22 +00:00
acme_test.go acme: try to fetch nonce from directory first 2019-02-19 17:22:22 +00:00
http.go acme: consistently return original errors from retries 2018-06-21 12:51:26 +00:00
http_test.go acme: try to fetch nonce from directory first 2019-02-19 17:22:22 +00:00
jws.go acme: support custom crypto.Signer implementations 2018-11-06 15:23:44 +00:00
jws_test.go acme: support custom crypto.Signer implementations 2018-11-06 15:23:44 +00:00
types.go acme: add support for TLS-ALPN 2018-06-08 09:28:29 +00:00
types_test.go acme: add function to check rate limits 2017-04-25 18:26:15 +00:00