Commit Graph

  • 7bdfbf5d98
    Merge branch 'main' of github.com:letsencrypt/boulder into no-loopback-addresses James Renken 2025-05-21 18:39:06 -0700
  • 7d4a6df345
    Address feedback James Renken 2025-05-21 18:37:35 -0700
  • 463e3f3590
    Merge branch 'main' of github.com:letsencrypt/boulder into reserved-ip-move James Renken 2025-05-21 17:55:20 -0700
  • 2eaa2fea64
    SA: Stop storing and retrieving contacts (#8198) Aaron Gable 2025-05-21 16:23:35 -0700
  • d662c0843d
    Include Location: header in GET Order responses (#8202) Aaron Gable 2025-05-21 16:21:54 -0700
  • 09ba3d10ed
    bdns, va: Remove DNSAllowLoopbackAddresses James Renken 2025-05-20 16:51:10 -0700
  • 6d9516b6e6
    Oops, fix VA test James Renken 2025-05-20 16:17:21 -0700
  • 360daa8d05
    Fix hubris James Renken 2025-05-20 16:14:25 -0700
  • 69506ee205
    Revert non-loopback function, it won't be used James Renken 2025-05-20 16:01:29 -0700
  • bf3b0d6dd4
    Merge branch 'main' of github.com:letsencrypt/boulder into reserved-ip-move James Renken 2025-05-20 15:58:39 -0700
  • eee6c12756
    Fix tests & address feedback James Renken 2025-05-20 15:57:28 -0700
  • 41f8980f70 Include Location: header in GET Order responses Aaron Gable 2025-05-20 15:50:40 -0700
  • 8e3127dc4c
    Merge branch 'main' of github.com:letsencrypt/boulder into wfe-ips James Renken 2025-05-20 11:55:34 -0700
  • 7ea51e5f91
    boulder-observer: check certificate status via CRL too (#8186) release-2025-05-20 Phil Porada 2025-05-20 09:24:21 -0700
  • 8bb4804151 Propagate context Aaron Gable 2025-05-19 16:24:43 -0700
  • 941acbf230 SA: Stop storing and retrieving contacts Aaron Gable 2025-05-19 13:22:21 -0700
  • 3bafbd189d
    Fix CSR unit test James Renken 2025-05-16 17:45:06 -0700
  • ff1bf102f8
    Improve integration test, fix IPs in VerifyCSR, bypass addIssuedNames James Renken 2025-05-16 12:35:52 -0700
  • 8b683cc50b
    Test failed successfully James Renken 2025-05-15 19:19:51 -0700
  • 8c8fd9821d
    Work around test framework limitations for IPs James Renken 2025-05-15 19:10:38 -0700
  • b2d6b63d72
    Improve test case & helper funcs James Renken 2025-05-15 19:05:35 -0700
  • cda0ee5996
    Permit all valid ident types in NewOrder; update TODOs and error strings; revise test cases James Renken 2025-05-15 18:10:21 -0700
  • 9bbc6dc589
    Dessert (integration test) first James Renken 2025-05-14 15:47:20 -0700
  • d02272b9e7 Remove test stub Aaron Gable 2025-05-16 17:07:14 -0700
  • bf426bfab5 Fixup conf test Aaron Gable 2025-05-16 17:06:44 -0700
  • 97fc974a78
    More common case goes first; update TODO James Renken 2025-05-16 16:50:29 -0700
  • 436769fe78 Make prober more flexible, and clean up test Aaron Gable 2025-05-16 16:46:22 -0700
  • 121ce96aed
    Merge branch 'main' of github.com:letsencrypt/boulder into reserved-ip-move James Renken 2025-05-16 16:47:37 -0700
  • e98c34b154
    Add new implementation James Renken 2025-05-16 16:36:08 -0700
  • 451f132ef9
    Refactor IsReservedIP James Renken 2025-05-16 16:29:18 -0700
  • ac2dae70f2
    cert-checker: add support for ipAddress SANs (#8188) Aaron Gable 2025-05-16 16:22:56 -0700
  • aaaf623d49
    va: Remove deprecated Domain from vapb.IsCAAValidRequest (#8193) James Renken 2025-05-16 15:21:28 -0700
  • 4240c25f56 Big whitespace change Aaron Gable 2025-05-16 15:18:40 -0700
  • a7c60431a9 WIP: add integration test Aaron Gable 2025-05-16 14:58:06 -0700
  • fdcb542e6d
    Merge branch 'main' of github.com:letsencrypt/boulder into reserved-ip-move James Renken 2025-05-16 14:10:20 -0700
  • 7291b18f69
    Update comment James Renken 2025-05-16 14:07:17 -0700
  • 56233c5c7e
    Merge branch 'main' of github.com:letsencrypt/boulder into va-8023 James Renken 2025-05-16 14:05:53 -0700
  • ea5d138b3b
    bdns, policy: Move reserved IP checking from bdns to policy James Renken 2025-05-16 14:05:11 -0700
  • 60033836db
    ra: Add IdentifierTypes to profiles (#8154) James Renken 2025-05-16 13:57:02 -0700
  • 6f6dcbd514
    (IP) Address feedback James Renken 2025-05-16 13:34:36 -0700
  • d8beae5ae7
    Merge branch 'main' of github.com:letsencrypt/boulder into profile-based-ips James Renken 2025-05-16 13:30:27 -0700
  • c9e2f98b5d
    Remove OCSP and MustStaple support from issuance (#8181) Aaron Gable 2025-05-16 11:51:02 -0700
  • caa29b2937
    Update to zlint 3.6.6 (#8194) Matthew McPherrin 2025-05-16 14:48:31 -0400
  • e0d45540a4 Update to zlint 3.6.6 Matthew McPherrin 2025-05-16 10:39:36 -0400
  • 51167f2544
    Fix lint James Renken 2025-05-15 22:48:49 -0700
  • 0362f1cd29
    Remove deprecated Domain from vapb.IsCAAValidRequest James Renken 2025-05-15 22:36:10 -0700
  • bef73f3c8b
    va: Fix deployability of CAA change in #8153 (#8190) James Renken 2025-05-15 12:21:30 -0700
  • 8125f32878
    CAA: Fix reference to req.Identifier Aaron Gable 2025-05-15 12:14:49 -0700
  • a7a8a9e9f6
    va: Fix deployability of CAA change in #8153 James Renken 2025-05-15 12:10:36 -0700
  • f2e56e6e39
    Address hubris James Renken 2025-05-14 17:28:49 -0700
  • 098634ae48 cert-checker: add support for ipAddress SANs Aaron Gable 2025-05-14 17:20:38 -0700
  • c2f4b97457
    Address feedback James Renken 2025-05-14 17:19:14 -0700
  • 95373f69c7
    Merge branch 'main' of github.com:letsencrypt/boulder into profile-based-ips James Renken 2025-05-14 17:14:11 -0700
  • 4edc1dcd43 Add support for checking CRLs. Still needs test. Aaron Gable 2025-05-14 17:09:38 -0700
  • 0be173bfcc
    Merge branch 'main' into rm-omitocsp-profile Aaron Gable 2025-05-14 16:28:19 -0700
  • 4d7473e5ea
    Remove support for OCSP Must-Staple allowlist (#8180) Aaron Gable 2025-05-14 16:20:05 -0700
  • ac74e7db35
    Math is hard James Renken 2025-05-14 15:44:59 -0700
  • f853382538 Add TODO for #8184 James Renken 2025-05-14 14:18:10 -0700
  • c145f81ec4 Fix unit test; remove integration tests which depend on WFE support James Renken 2025-05-14 14:13:40 -0700
  • da11fd552f
    Merge branch 'main' into profile-based-ips James Renken 2025-05-14 13:50:26 -0700
  • 648ab05b37
    policy: Support IP address identifiers (#8173) James Renken 2025-05-14 13:49:51 -0700
  • 6c4482ee62
    Only check OCSP if certificate contains an OCSP URL Phil Porada 2025-05-14 10:26:43 -0700
  • 5a511682a6
    Address feedback James Renken 2025-05-13 16:39:42 -0700
  • 4d28e010f6
    Add more lints: asciicheck, bidichk, spancheck (#8182) James Renken 2025-05-13 11:56:40 -0700
  • 8c1098590f
    Add more lints: asciicheck, bidichk, spancheck James Renken 2025-05-12 23:20:46 -0700
  • 7362eae366
    pa: Add map of accepted identifier types James Renken 2025-05-12 19:36:55 -0700
  • aaa82a27e6
    Add RFC 5952 check in validIP; add more IP address test cases James Renken 2025-05-12 16:54:58 -0700
  • 8930fee067 Remove OCSP and MustStaple support from issuance Aaron Gable 2025-05-12 16:00:31 -0700
  • 145d1a8990 Remove support for OCSP Must-Staple allowlist Aaron Gable 2025-05-12 15:23:45 -0700
  • f0dfbfdb08
    deps: update certificate-transparency-go (#8171) release-2025-05-12 Jacob Hoffman-Andrews 2025-05-12 14:55:09 -0700
  • 388c68cb49
    sa: use internal certificateStatusModel instead of core.CertificateStatus (#8159) Jacob Hoffman-Andrews 2025-05-12 14:53:08 -0700
  • 01a299cd0f
    Deprecate MPICFullResults feature flag (#8169) Jacob Hoffman-Andrews 2025-05-12 14:47:32 -0700
  • b6887a945e
    email-exporter: Count Pardot API errors encountered (#8175) Samantha Frank 2025-05-12 17:43:09 -0400
  • 1452773eb1 email-exporter: Count Pardot API errors encountered Samantha 2025-05-12 15:46:13 -0400
  • faa07f5e36
    Finish cleaning up unused CT config types (#8174) Aaron Gable 2025-05-10 18:37:59 -0700
  • 856ffa2ff5 Finish cleaning up unused CT config types Aaron Gable 2025-05-09 12:47:13 -0700
  • e8e06b2424
    policy: Support IP address identifiers James Renken 2025-05-08 17:08:13 -0700
  • e625ff3534
    sa: Store and manage rate limit overrides in the database (#8142) Samantha Frank 2025-05-08 14:50:30 -0400
  • 650c269bf6
    ra, va: Bypass CAA for IP identifiers & use Identifier in IsCAAValidRequest (#8153) James Renken 2025-05-08 11:22:06 -0700
  • 0c167bec05 Address comment Samantha 2025-05-08 12:26:31 -0400
  • b45d7ab64a
    Add IP address case to TestPerformValidationSuccess James Renken 2025-05-07 19:38:22 -0700
  • f86f88d563
    Include supported algs in badSignatureAlgorithm problem doc (#8170) Aaron Gable 2025-05-07 18:29:14 -0700
  • 0415eb8a52
    Fix TestRecheckSkipIPAddress James Renken 2025-05-07 17:53:43 -0700
  • 5dbccb2939
    Add recheck test cases James Renken 2025-05-07 17:45:22 -0700
  • 84ceeb2c46
    Fix rebase/merge failure James Renken 2025-05-07 15:27:40 -0700
  • 39b521f946 deps: update certificate-transparency-go Jacob Hoffman-Andrews 2025-05-07 15:18:14 -0700
  • 7d946f55d8
    Address feedback; fix default case bug James Renken 2025-05-06 16:45:18 -0700
  • ac16e11a09
    Skip CAA for IP address identifiers James Renken 2025-05-05 18:32:15 -0700
  • 5cbea36a34
    Address feedback James Renken 2025-05-01 13:23:51 -0700
  • 9b926ebdb3
    va: Use Identifier in IsCAAValidRequest James Renken 2025-04-30 18:35:50 -0700
  • c1c09f0eae
    Address feedback James Renken 2025-05-01 13:23:51 -0700
  • 8e7eaa9e3d
    va: Use Identifier in IsCAAValidRequest James Renken 2025-04-30 18:35:50 -0700
  • db0b466276 Slightly more realistic/compliant example Aaron Gable 2025-05-07 15:13:04 -0700
  • 52615d9060
    ra: Fully support identifiers in NewOrder, PerformValidation & RevokeCertByApplicant (#8139) James Renken 2025-05-07 15:11:41 -0700
  • d55981b78d Respond to test comments Aaron Gable 2025-05-07 15:06:56 -0700
  • f3779af2c8
    Update cmd/rocsp-tool/client_test.go Jacob Hoffman-Andrews 2025-05-07 14:31:37 -0700
  • ba0f8ec3fa Remove config required tag and check for required in main email-exporter-override-baseurl Samantha 2025-05-07 14:50:09 -0400
  • a8724cf719
    Address feedback James Renken 2025-05-06 17:10:21 -0700
  • 38f8b11a83 Include supported algs in badSignatureAlgorithm problem doc Aaron Gable 2025-05-06 16:04:26 -0700
  • cf8b7bd107 Deprecate MPICFullResults feature flag Jacob Hoffman-Andrews 2025-05-06 14:56:32 -0700