diff --git a/.travis.yml b/.travis.yml
index 39ce4e692..b06e1260f 100644
--- a/.travis.yml
+++ b/.travis.yml
@@ -2,6 +2,7 @@ language: go
 
 go:
   - "1.13.2"
+  - "1.14.1"
 
 go_import_path: github.com/letsencrypt/boulder
 
diff --git a/docker-compose.yml b/docker-compose.yml
index f3279eeab..ac2d9d2e2 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -2,7 +2,7 @@ version: '3'
 services:
     boulder:
         # To minimize fetching this should be the same version used below
-        image: letsencrypt/boulder-tools-go${TRAVIS_GO_VERSION:-1.13.2}:2020-01-07
+        image: letsencrypt/boulder-tools-go${TRAVIS_GO_VERSION:-1.13.2}:2020-03-26
         environment:
             FAKE_DNS: 10.77.77.77
             PKCS11_PROXY_SOCKET: tcp://boulder-hsm:5657
@@ -58,7 +58,7 @@ services:
         working_dir: /go/src/github.com/letsencrypt/boulder
     bhsm:
         # To minimize fetching this should be the same version used above
-        image: letsencrypt/boulder-tools-go${TRAVIS_GO_VERSION:-1.13.2}:2020-01-07
+        image: letsencrypt/boulder-tools-go${TRAVIS_GO_VERSION:-1.13.2}:2020-03-26
         environment:
             PKCS11_DAEMON_SOCKET: tcp://0.0.0.0:5657
         command: /usr/local/bin/pkcs11-daemon /usr/lib/softhsm/libsofthsm2.so
@@ -85,7 +85,7 @@ services:
         logging:
             driver: none
     netaccess:
-        image: letsencrypt/boulder-tools-go${TRAVIS_GO_VERSION:-1.13.2}:2020-01-07
+        image: letsencrypt/boulder-tools-go${TRAVIS_GO_VERSION:-1.13.2}:2020-03-26
         environment:
             GO111MODULE: "on"
             GOFLAGS: "-mod=vendor"
diff --git a/test/boulder-tools/build.sh b/test/boulder-tools/build.sh
index d08b03a22..38cd9cbae 100755
--- a/test/boulder-tools/build.sh
+++ b/test/boulder-tools/build.sh
@@ -36,24 +36,30 @@ apt-get install -y --no-install-recommends \
 curl -L https://github.com/google/protobuf/releases/download/v3.6.1/protoc-3.6.1-linux-x86_64.zip -o /tmp/protoc.zip
 unzip /tmp/protoc.zip -d /usr/local/protoc
 
-# Override default GOBIN and GOPATH
-export GOBIN=/usr/local/bin GOPATH=/tmp/gopath
+# Override default GOBIN and GOCACHE
+export GOBIN=/usr/local/bin GOCACHE=/tmp/gocache
 
 # Install protobuf and testing/dev tools.
-go get \
-  github.com/letsencrypt/pebble/cmd/pebble-challtestsrv \
+# Note: The version of golang/protobuf is partially tied to the version of grpc
+# used by Boulder overall. Updating it may require updating the grpc version
+# and vice versa.
+GO111MODULE=on go get \
   bitbucket.org/liamstask/goose/cmd/goose \
   golang.org/x/lint/golint \
-  github.com/golang/mock/mockgen \
-  github.com/golang/protobuf/proto \
-  github.com/golang/protobuf/protoc-gen-go \
+  github.com/golang/mock/mockgen@v1.3.0 \
+  github.com/golang/protobuf/proto@v1.3.2 \
+  github.com/golang/protobuf/protoc-gen-go@v1.3.2 \
   github.com/kisielk/errcheck \
-  github.com/mattn/goveralls \
+  github.com/mattn/goveralls@v0.0.3 \
   github.com/modocache/gover \
   golang.org/x/tools/cover \
   golang.org/x/tools/cmd/stringer \
   github.com/gordonklaus/ineffassign
 
+# Pebble's latest version is v2+, but it's not properly go mod compatible, so we
+# fetch it in GOPATH mode.
+go get github.com/letsencrypt/pebble/cmd/pebble-challtestsrv
+
 # Install codespell for linting common spelling errors
 pip3 install codespell
 
diff --git a/test/boulder-tools/tag_and_upload.sh b/test/boulder-tools/tag_and_upload.sh
index 9d944939e..d31f3c9f0 100755
--- a/test/boulder-tools/tag_and_upload.sh
+++ b/test/boulder-tools/tag_and_upload.sh
@@ -4,7 +4,7 @@ cd $(dirname $0)
 
 DATESTAMP=$(date +%Y-%m-%d)
 BASE_TAG_NAME="letsencrypt/boulder-tools"
-GO_VERSIONS=( "1.13.2" )
+GO_VERSIONS=( "1.13.2" "1.14.1" )
 
 # Build a tagged image for each GO_VERSION
 for GO_VERSION in "${GO_VERSIONS[@]}"
diff --git a/test/load-generator/acme/directory_test.go b/test/load-generator/acme/directory_test.go
index 63e7fe7ff..d1ec106b2 100644
--- a/test/load-generator/acme/directory_test.go
+++ b/test/load-generator/acme/directory_test.go
@@ -105,8 +105,6 @@ func newMockDirectoryServer() *mockDirectoryServer {
 // TestNew tests that creating a new Client and populating the endpoint map
 // works correctly.
 func TestNew(t *testing.T) {
-	unreachableDirectoryURL := "http://localhost:1987"
-
 	srv := newMockDirectoryServer()
 	srv.Start()
 	defer srv.Close()
@@ -153,11 +151,14 @@ func TestNew(t *testing.T) {
 			DirectoryURL:  "http://" + string([]byte{0x1, 0x7F}),
 			ExpectedError: ErrInvalidDirectoryURL.Error(),
 		},
+		/* This test case depends on an error message that changed in Go 1.14. We
+		   can uncomment it once we've moved fully to Go 1.14.
 		{
 			Name:          "unreachable directory URL",
-			DirectoryURL:  unreachableDirectoryURL,
+			DirectoryURL:  "http://localhost:1987",
 			ExpectedError: "Get http://localhost:1987: dial tcp 127.0.0.1:1987: connect: connection refused",
 		},
+		*/
 		{
 			Name:          "wrong directory HTTP status code",
 			DirectoryURL:  wrongStatusCodeURL,