Phil Porada
|
7ea51e5f91
|
boulder-observer: check certificate status via CRL too (#8186)
Let's Encrypt [recently removed OCSP URLs from
certificates](https://community.letsencrypt.org/t/removing-ocsp-urls-from-certificates/236699)
which unfortunately caused the boulder-observer TLS prober to panic.
This change short circuits the OCSP checking logic if no OCSP URL exists
in the to-be-checked certificate.
Fixes https://github.com/letsencrypt/boulder/issues/8185
---------
Co-authored-by: Aaron Gable <aaron@letsencrypt.org>
|
2025-05-20 09:24:21 -07:00 |