boulder/issuance
Aaron Gable c9e2f98b5d
Remove OCSP and MustStaple support from issuance (#8181)
Remove the ability for the issuance package to include the AIA OCSP URI
and the Must Staple (more properly known as the tlsRequest) extension in
certificates. Deprecate the "OmitOCSP" and "AllowMustStaple" profile
config keys, as they no longer have any effect. Similarly deprecate the
"OCSPURL" issuer config key, as it is no longer included in
certificates.

Update the tests to always include to CRLDP extension instead, and
remove some OCSP- or Stapling-specific test cases.

Fixes https://github.com/letsencrypt/boulder/issues/8179
2025-05-16 11:51:02 -07:00
..
cert.go Remove OCSP and MustStaple support from issuance (#8181) 2025-05-16 11:51:02 -07:00
cert_test.go Remove OCSP and MustStaple support from issuance (#8181) 2025-05-16 11:51:02 -07:00
crl.go Use PKIMetal to lint CRLs in CI (#8061) 2025-03-14 16:28:56 -07:00
crl_test.go test: Remove loop variable rebinding (#7587) 2024-07-12 10:43:25 -04:00
issuer.go Remove OCSP and MustStaple support from issuance (#8181) 2025-05-16 11:51:02 -07:00
issuer_test.go Remove OCSP and MustStaple support from issuance (#8181) 2025-05-16 11:51:02 -07:00