- Fixes an issue cleaning up CertificateSigningRequest objects with an unparseable `status.certificate` field ([#103949](https://github.com/kubernetes/kubernetes/pull/103949), [@liggitt](https://github.com/liggitt)) [SIG Apps and Auth]

    <glob pattern="*.acc"/>
  </mime-type>
  <mime-type type="application/vnd.amiga.ami">
    <glob pattern="*.ami"/>
  </mime-type>
  <mime-type type="application/vnd.anser-web-certificate-issue-initiation">
    <glob pattern="*.cii"/>
  </mime-type>
  <mime-type type="application/vnd.anser-web-funds-transfer-initiation">
    <glob pattern="*.fti"/>
  </mime-type>

* Resolves x509 verification issue with masters dialing nodes when started with --kubelet-certificate-authority ([#33141](https://github.com/kubernetes/kubernetes/pull/33141), [@liggitt](https://github.com/liggitt))

  // +optional
  optional int64 limitBytes = 8;

  // insecureSkipTLSVerifyBackend indicates that the apiserver should not confirm the validity of the
  // serving certificate of the backend it is connecting to.  This will make the HTTPS connection between the apiserver
  // and the backend insecure. This means the apiserver cannot verify the log data it is receiving came from the real

pkg crypto/tls, func InsecureCipherSuites() []*CipherSuite
pkg crypto/tls, method (*CertificateRequestInfo) SupportsCertificate(*Certificate) error
pkg crypto/tls, method (*ClientHelloInfo) SupportsCertificate(*Certificate) error
pkg crypto/tls, type Certificate struct, SupportedSignatureAlgorithms []SignatureScheme
pkg crypto/tls, type CertificateRequestInfo struct, Version uint16
pkg crypto/tls, type CipherSuite struct

pkg crypto/x509, type Certificate struct, CRLDistributionPoints []string
pkg crypto/x509, type Certificate struct, Extensions []pkix.Extension
pkg crypto/x509, type Certificate struct, ExtraExtensions []pkix.Extension
pkg crypto/x509, type Certificate struct, IssuingCertificateURL []string
pkg crypto/x509, type Certificate struct, OCSPServer []string
pkg database/sql, method (*DB) SetMaxOpenConns(int)

### Docs

* 📝 Add external link: How to Create A Fake Certificate Authority And Generate TLS Certs for FastAPI. PR [#2839](https://github.com/tiangolo/fastapi/pull/2839) by [@aitoehigie](https://github.com/aitoehigie).

pkg crypto/tls, type CertificateVerificationError struct #48152
pkg crypto/tls, type CertificateVerificationError struct, Err error #48152
pkg crypto/tls, type CertificateVerificationError struct, UnverifiedCertificates []*x509.Certificate #48152
pkg crypto/x509, func SetFallbackRoots(*CertPool) #43958
pkg debug/elf, const R_LARCH_32_PCREL = 99 #54222
pkg debug/elf, const R_LARCH_32_PCREL R_LARCH #54222
pkg debug/elf, const R_LARCH_ABS64_HI12 = 70 #54222

OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.

================================================================

github.com/googleapis/enterprise-certificate-proxy
https://github.com/googleapis/enterprise-certificate-proxy
----------------------------------------------------------------

                                 Apache License
                           Version 2.0, January 2004

pkg crypto/x509, func IsEncryptedPEMBlock(*pem.Block) bool
pkg crypto/x509, func ParseECPrivateKey([]uint8) (*ecdsa.PrivateKey, error)
pkg crypto/x509, method (SystemRootsError) Error() string
pkg crypto/x509, type Certificate struct, IPAddresses []net.IP
pkg crypto/x509, type PEMCipher int
pkg crypto/x509, type SystemRootsError struct
pkg crypto/x509, type VerifyOptions struct, KeyUsages []ExtKeyUsage