Daniel McCarney

It would be nice to resubmit certificates from a monitored log beyond ones issued & previously submitted by a `ct-woodpecker` instance. E.g. pick random entries from the log, resubmit them,...

Follow up to https://github.com/letsencrypt/ct-woodpecker/issues/5 We should also have the certSubmitter submit multiple copies of the same new cert in parallel. If distinct SCTs are returned then all of them should...

This will require refactoring the `inclusionChecker`, the `sctFetcher`, and the `certSubmitter` so that we can call the "work" functions directly without having to interact at the abstraction of the `woodpecker`...

Update certificate-transparency-go to latest commit

6

To update ct-go we should first update the related deps the upgrade will bump: - [x] github.com/golang/mock - https://github.com/letsencrypt/boulder/pull/4621 - [x] gopkg.in/yaml.v2 - https://github.com/letsencrypt/boulder/pull/4622 - [x] golang.org/x/net - https://github.com/letsencrypt/boulder/pull/4623 -...

Hi there, Your project has a hardcoded URL reference to the [current](https://letsencrypt.org/documents/LE-SA-v1.1.1-August-1-2016.pdf) Let's Encrypt subscriber agreement: https://github.com/AirConsole/letsencrypt/blob/master/__init__.py#L228 This URL [**changed November 15th**](https://community.letsencrypt.org/t/subscriber-agreement-update-november-15-2017/45607). New registration requests using this ACME client will...

0.23 release preparation

3

Let's collect up a burndown list of tasks to be completed for a 0.23 release that includes FIPS support and the new choice for default crypto provider. * [x] https://github.com/rustls/rustls/pull/1640...

reduce bifurcation of library internals by using low-level API in high-level API

11

**Is your feature request related to a problem? Please describe.** The gradual introduction of a lower-level API that grants callers more control over allocation has bifurcated the internal structure of...

WIP: Encrypted Client Hello support (client only)

18

## Description This is a **work in progress** branch that brings encrypted client hello (ECH) compatibility to Rustls **clients** based on [draft-ietf-tls-esni-18](https://datatracker.ietf.org/doc/html/draft-ietf-tls-esni-18). It does _not_ add any support for writing...

**Is your feature request related to a problem? Please describe.** Recent benchmarking experience has shown that there's a meaningful performance difference between using Rustls with the default allocator and with...

Pass more context into mud.on_connect callback

2

Having a server name passed through to the `mud.on_connect` callback could make writing certain plugins easier than it might be otherwise. It would be useful to evaluate what can be...