Commit Graph

  • d139678c7e
    Merge 1ca19f1f6d into f7532d2dba Samantha Frank 2025-06-30 14:01:31 -0400
  • 1ca19f1f6d sa/proto: Return full override response admin-overrides-in-db-part-2 Samantha 2025-06-30 13:58:57 -0400
  • 9123b89c19
    Merge f7532d2dba into 8aafb31347 Samantha Frank 2025-06-30 13:40:59 -0400
  • f7532d2dba ratelimits: Supporting additions for admin tooling admin-overrides-in-db-part-1 Samantha 2025-06-30 13:38:17 -0400
  • 32cae7d8ef ratelimits: Supporting exports for admin tooling Samantha 2025-06-30 12:27:49 -0400
  • 071f4edcff
    Merge be4a5e3444 into 8aafb31347 Aaron Gable 2025-06-30 10:14:47 +0200
  • 3ba928ae56
    Merge 8133e3367c into 8aafb31347 James Renken 2025-06-27 18:21:59 -0700
  • 8133e3367c
    Add IP prefix blocklist ip-denylists James Renken 2025-06-27 18:21:33 -0700
  • 51fac92f21 Explicit reject non-DNS names in CN. no-ip-cn Jacob Hoffman-Andrews 2025-06-27 15:36:40 -0700
  • f9bb9bdf24 Revert "Ignore IP CNs in CSRs (#8231)" Jacob Hoffman-Andrews 2025-06-27 15:11:34 -0700
  • e39547e780
    Merge 6a35dc55b2 into 8aafb31347 Samantha Frank 2025-06-27 17:27:05 -0400
  • 6a35dc55b2 Add validation to the overrides CLI tooling admin-overrides-in-database Samantha 2025-06-27 17:17:10 -0400
  • 63556ed829 Fix BuildBucketKey and make bucketKey constructors more consistent Samantha 2025-06-27 16:52:36 -0400
  • 684384c586
    Merge 632b971694 into 8aafb31347 Aaron Gable 2025-06-27 14:49:20 -0400
  • 3d729fe77c
    Merge abab3ae28d into 8aafb31347 github-actions[bot] 2025-06-27 16:30:08 +0000
  • abab3ae28d Update IANA special-purpose address registries iana-registries-gha Irwin the IANA Bot 2025-06-27 16:30:05 +0000
  • 4c3f5f33c3
    Merge 430d34dd12 into 8aafb31347 Jacob Hoffman-Andrews 2025-06-27 00:02:50 +0000
  • 430d34dd12 Skip on non-config-next ip-cn Jacob Hoffman-Andrews 2025-06-26 17:02:39 -0700
  • e90e364afa Handle IP in CSR CN Jacob Hoffman-Andrews 2025-06-26 16:09:13 -0700
  • f73a81e9ff Use new bucketKey constructor names Samantha 2025-06-26 18:52:17 -0400
  • 9ec6af8633 Merge remote-tracking branch 'origin/main' into admin-overrides-in-database Samantha 2025-06-26 18:45:38 -0400
  • ebf92856e0 Add identifier support to BuildBucketKey Samantha 2025-06-26 18:44:44 -0400
  • df4fc3d20d test finalization with IP in CommonName Jacob Hoffman-Andrews 2025-06-26 15:40:46 -0700
  • 8aafb31347
    ratelimits: Small cleanup in transaction.go (#8275) main Samantha Frank 2025-06-26 17:43:02 -0400
  • cfad7941fb Fix BuildBucketKey Samantha 2025-06-26 16:30:13 -0400
  • fb26a4b5ae Replace private IP in testdata with public IP Samantha 2025-06-26 16:23:57 -0400
  • 282afc1359 Merge remote-tracking branch 'origin/main' into admin-overrides-in-database Samantha 2025-06-26 16:11:06 -0400
  • 8d4d6ea68a ratelimits: Small cleanup in transactions.go Samantha 2025-06-26 13:26:50 -0400
  • 30eac83730
    RFC 9773: Update ARI URL (#8274) Aaron Gable 2025-06-26 08:50:44 -0700
  • 0130861b1a
    Merge b593665daf into 4e74a25582 Samantha Frank 2025-06-26 09:54:46 -0400
  • a8f3cdddd5
    Merge 8535f2ae21 into 4e74a25582 Matthew McPherrin 2025-06-25 20:16:18 -0700
  • d572c3b8c6 RFC 9773: Update ARI URL Aaron Gable 2025-06-25 16:51:37 -0700
  • 4e74a25582
    Restore TestAccountEmailError (#8273) Aaron Gable 2025-06-25 16:35:52 -0700
  • 632b971694 Remove all registration contact code paths rm-update-contact Aaron Gable 2025-06-13 17:22:06 -0700
  • 21d022840b
    Really fix GHA for IANA registries (#8271) James Renken 2025-06-25 15:58:44 -0700
  • 88422541e4 Restore TestAccountEmailError Aaron Gable 2025-06-25 15:52:48 -0700
  • e110ec9a03
    Confine contact addresses to the WFE (#8245) Aaron Gable 2025-06-25 15:51:44 -0700
  • 44d434707a Fix typo Aaron Gable 2025-06-25 14:20:39 -0700
  • 77500bd9a4 Add unit tests Aaron Gable 2025-06-25 14:15:54 -0700
  • 7e83b64d66
    Actual, simple fix James Renken 2025-06-25 13:49:35 -0700
  • 77ae02f7b5
    Revert: Fix GHA for IANA registries James Renken 2025-06-25 13:32:44 -0700
  • ea23894910
    Fix GHA for IANA registries (#8270) James Renken 2025-06-25 13:30:47 -0700
  • 13ce1ed270 Allow max contacts per reg to be configured, and enforce it Aaron Gable 2025-06-25 12:40:28 -0700
  • 9f567db815
    Fix GHA for IANA registries James Renken 2025-06-25 12:24:11 -0700
  • 9308392adf
    iana: Embed & parse reserved IP registries from primary source (#8249) James Renken 2025-06-25 12:05:25 -0700
  • 901f2dba7c
    build(deps): bump the aws group with 4 updates (#8263) dependabot[bot] 2025-06-25 14:08:41 -0400
  • a29f2f37d6
    va: Check for reserved IP addresses at dialer creation (#8257) James Renken 2025-06-25 10:09:47 -0700
  • 9f0c5ca684
    Merge fe12f01d57 into c576a200d0 Shiloh Heurich 2025-06-25 13:30:01 +0200
  • 1c335a5f25
    Merge 6726be66e8 into c576a200d0 Shiloh Heurich 2025-06-25 13:29:44 +0200
  • 70c5d8b9a9
    build(deps): bump the aws group with 4 updates dependabot[bot] 2025-06-25 01:23:16 +0000
  • b82d41bd67
    Address feedback James Renken 2025-06-24 17:57:18 -0700
  • 19967b2f77
    Merge branch 'main' of github.com:letsencrypt/boulder into iana-registries James Renken 2025-06-24 17:24:53 -0700
  • be4a5e3444 Hotfix branch name shouldn't include tag's patch version release-script Aaron Gable 2025-06-24 16:36:29 -0700
  • c576a200d0
    Remove id-kp-clientAuth from intermediate ceremony (#8265) Aaron Gable 2025-06-24 16:19:31 -0700
  • f5e096ebac Simplify and overhaul tag tool, branch tool, and docs Aaron Gable 2025-06-24 15:48:55 -0700
  • a47fd5a985 Appease typocheck Aaron Gable 2025-06-24 13:33:49 -0700
  • cf314f5ff0 Split release script to two locations Aaron Gable 2025-06-24 13:30:24 -0700
  • fe12f01d57
    Complete dns-account-01 integration: remove gRPC protocol churn and use config-driven approach Shiloh Heurich 2025-06-19 14:55:23 -0400
  • 5279cc2e93
    test: Add and update tests for dns-account-01 Shiloh Heurich 2025-05-06 17:23:54 -0400
  • 12c407c74b
    Enable dns-account-01 in config-next Shiloh Heurich 2025-05-02 13:48:17 -0400
  • ca266bc066
    refactor(va): rename testAccountURL to testAccountURI for naming consistency Shiloh Heurich 2025-04-28 21:21:56 +0000
  • 5bfc857241
    feat(va): Add routing for dns-account-01 challenge validation Shiloh Heurich 2025-04-28 17:30:20 +0000
  • 86c6fb1e98
    test: Ignore dns-account-01 challenges in Python-based tests Shiloh Heurich 2025-04-28 17:58:44 +0000
  • 59fbec992f
    feat(va): Implement dns-account-01 challenge validation Shiloh Heurich 2025-04-25 22:03:13 +0000
  • a1bb6aa0f3
    refactor(va): Extract common DNS validation logic Shiloh Heurich 2025-04-24 16:54:18 +0000
  • 8e86944068
    feat: Update Policy Authority to offer dns-account-01 challenge Shiloh Heurich 2025-04-23 21:32:16 +0000
  • 54d1d599ea
    feat: Add `DNSAccount01Enabled` feature flag in `features/features.go` Shiloh Heurich 2025-05-02 15:46:27 -0400
  • 99a874e590
    test: Add dns-account-01 challenge test case to TestGetValidAuthorizations2 Shiloh Heurich 2025-05-27 21:09:29 -0400
  • 694ef6c475
    feat: Add dns-account-01 challenge type to SA model Shiloh Heurich 2025-05-06 12:40:48 -0400
  • dbd9ba7a6c
    chore: Update vendor dependency `github.com/eggsampler/acme/v3` v3.6.2 Shiloh Heurich 2025-05-02 14:45:06 -0400
  • 84c90a9312
    feat: Add core definitions for dns-account-01 challenge type Shiloh Heurich 2025-05-02 14:43:43 -0400
  • 6726be66e8
    test: Add dns-account-01 challenge test case to TestGetValidAuthorizations2 Shiloh Heurich 2025-05-27 21:09:29 -0400
  • 60e6787de1
    feat: Add dns-account-01 challenge type to SA model Shiloh Heurich 2025-05-06 12:40:48 -0400
  • 3f0ddb929f
    chore: Update vendor dependency `github.com/eggsampler/acme/v3` v3.6.2 Shiloh Heurich 2025-05-02 14:45:06 -0400
  • a8f788c046
    feat: Add core definitions for dns-account-01 challenge type Shiloh Heurich 2025-05-02 14:43:43 -0400
  • a0eac53eec Validate contact addresses in the WFE before account creation Aaron Gable 2025-06-24 10:11:24 -0700
  • 5ddd5acf99
    Print key hash as hex in admin tool. (#8266) release-2025-06-23 Matthew McPherrin 2025-06-23 20:36:06 -0400
  • cd02caea99
    Add verify-release-ancestry.sh (#8268) Jacob Hoffman-Andrews 2025-06-23 17:22:47 -0700
  • 8f18403066
    Remove unused import Matthew McPherrin 2025-06-23 20:20:16 -0400
  • b26d9d1b00
    Use %x instead of hex.EncodeToString Matthew McPherrin 2025-06-23 20:19:57 -0400
  • 95e0486511 Capitalize step name Jacob Hoffman-Andrews 2025-06-23 17:13:09 -0700
  • 14cdaa2b0c Use dots to match spaces. Jacob Hoffman-Andrews 2025-06-23 17:00:38 -0700
  • 47c5ad0476 Use for-each-ref instead of name-rev Jacob Hoffman-Andrews 2025-06-23 16:11:12 -0700
  • ddc4c8683b
    email-exporter: Don't waste limited attempts on cached entries (#8262) Samantha Frank 2025-06-23 17:55:53 -0400
  • cce134adae Add fetch-depth: 0 Jacob Hoffman-Andrews 2025-06-23 14:24:03 -0700
  • c206192687 Add verify-release-ancestry.sh Jacob Hoffman-Andrews 2025-06-18 16:54:59 -0700
  • f087d280be
    Add a GitHub Action that only runs on main or hotfix (#8267) Jacob Hoffman-Andrews 2025-06-23 12:16:01 -0700
  • a68f0be425 Add a GitHub Action that only runs on main or hotfix Jacob Hoffman-Andrews 2025-06-23 10:46:04 -0700
  • acfc40ae8f
    Merge b43a441a3b into 1bfc3186c8 Matthew McPherrin 2025-06-23 10:40:26 -0700
  • da04b9d677 Print key hash as hex in admin tool. Matthew McPherrin 2025-06-19 20:35:09 -0400
  • a2a0f9ac47
    Update IANA registry as per the GHA (yes, really) James Renken 2025-06-19 15:24:50 -0700
  • a712f4a63d
    Tiny tweak James Renken 2025-06-19 15:06:41 -0700
  • 2fdb43f34f
    Merge branch 'main' of github.com:letsencrypt/boulder into iana-registries James Renken 2025-06-19 15:06:27 -0700
  • 101dd96fd7 Remove id-kp-clientAuth from intermediate ceremony Aaron Gable 2025-06-18 15:40:16 -0700
  • 6b0452c337 Implement .Unwrap() on cmdError Aaron Gable 2025-06-18 17:06:39 -0700
  • ab922344af Improve legibility of instructions Aaron Gable 2025-06-18 15:34:12 -0700
  • 4880569cc2 Fix hotfix refspec Aaron Gable 2025-06-18 15:11:14 -0700
  • ac83e71b04 Improve output formatting Aaron Gable 2025-06-18 15:06:25 -0700
  • e8c12d1a55 Add safety checks for cherry-picking Aaron Gable 2025-06-18 14:54:43 -0700
  • 28ff0d0db2 Make the script more idiomatic Aaron Gable 2025-06-18 14:27:41 -0700