boulder/cmd
Aaron Gable e110ec9a03
Confine contact addresses to the WFE (#8245)
Change the WFE to stop populating the Contact field of the
NewRegistration requests it sends to the RA. Similarly change the WFE to
ignore the Contact field of any update-account requests it receives,
thereby removing all calls to the RA's UpdateRegistrationContact method.

Hoist the RA's contact validation logic into the WFE, so that we can
still return errors to clients which are presenting grossly malformed
contact fields, and have a first layer of protection against trying to
send malformed addresses to email-exporter.

A follow-up change (after a deploy cycle) will remove the deprecated RA
and SA methods.

Part of https://github.com/letsencrypt/boulder/issues/8199
2025-06-25 15:51:44 -07:00
..
admin Print key hash as hex in admin tool. (#8266) 2025-06-23 17:36:06 -07:00
akamai-purger Better compile-time type checking for gRPC server implementations (#7504) 2024-05-28 09:26:29 -07:00
bad-key-revoker bad-key-revoker: Fix log message formatting (#8252) 2025-06-16 11:30:14 -07:00
boulder Delete contact-auditor (#8244) 2025-06-16 09:29:33 -07:00
boulder-ca policy: Support IP address identifiers (#8173) 2025-05-14 13:49:51 -07:00
boulder-observer Add --addr and/or --debug-addr flags to all commands (#7175) 2023-12-07 17:41:01 -08:00
boulder-publisher Simplify issuance.NameID and how it is used (#7260) 2024-01-17 12:55:56 -08:00
boulder-ra Remove support for OCSP Must-Staple allowlist (#8180) 2025-05-14 16:20:05 -07:00
boulder-sa Simplify the features package (#7204) 2023-12-12 15:51:57 -05:00
boulder-va iana: Embed & parse reserved IP registries from primary source (#8249) 2025-06-25 12:05:25 -07:00
boulder-wfe2 Confine contact addresses to the WFE (#8245) 2025-06-25 15:51:44 -07:00
ceremony Remove id-kp-clientAuth from intermediate ceremony (#8265) 2025-06-24 16:19:31 -07:00
cert-checker identifier: Remove helper funcs from PB identifiers migration (#8236) 2025-06-13 12:55:32 -07:00
crl-checker Log version string for more tools at startup (#7087) 2023-09-19 12:46:55 -04:00
crl-storer Simplify the features package (#7204) 2023-12-12 15:51:57 -05:00
crl-updater crl-updater: UpdatePeriod safety check (#8131) 2025-04-21 13:54:14 -07:00
email-exporter email-exporter: Don't waste limited attempts on cached entries (#8262) 2025-06-23 14:55:53 -07:00
log-validator Add --addr and/or --debug-addr flags to all commands (#7175) 2023-12-07 17:41:01 -08:00
nonce-service Replace most uses of net.IP with netip.Addr (#8205) 2025-05-27 15:05:35 -07:00
ocsp-responder doc: add detail on ShutdownStopTimeout (#7921) 2025-01-07 13:28:36 -08:00
remoteva iana: Embed & parse reserved IP registries from primary source (#8249) 2025-06-25 12:05:25 -07:00
reversed-hostname-checker sa: Encode IP identifiers for issuedNames (#8210) 2025-05-27 14:55:19 -07:00
rocsp-tool Simplify docker-compose network setup (#8214) 2025-05-30 13:23:27 -07:00
sfe doc: add detail on ShutdownStopTimeout (#7921) 2025-01-07 13:28:36 -08:00
testdata Allow validating config.Duration type (#7564) 2024-06-27 13:45:19 -04:00
clock_generic.go Update golangci-lint from v1.29.0 to v1.42.1 (#5745) 2021-10-22 16:26:59 -07:00
clock_integration.go gRPC: reject request if clock skew is too large (#7686) 2024-08-29 11:32:24 -07:00
config.go grpc: Enable client-side health_v1 health checking (#8254) 2025-06-18 10:37:20 -04:00
config_test.go config: Use hex-encoding for HMACKey (#7950) 2025-01-15 14:28:09 -05:00
registry.go main: Validate config files by default (#6885) 2023-05-15 14:16:04 -04:00
shell.go build(deps): bump the otel group (#7968) 2025-06-06 17:22:48 -07:00
shell_test.go Delete notify-mailer, expiration-mailer, and id-exporter (#8230) 2025-06-12 15:45:04 -07:00