boulder/ca
Aaron Gable c9e2f98b5d
Remove OCSP and MustStaple support from issuance (#8181)
Remove the ability for the issuance package to include the AIA OCSP URI
and the Must Staple (more properly known as the tlsRequest) extension in
certificates. Deprecate the "OmitOCSP" and "AllowMustStaple" profile
config keys, as they no longer have any effect. Similarly deprecate the
"OCSPURL" issuer config key, as it is no longer included in
certificates.

Update the tests to always include to CRLDP extension instead, and
remove some OCSP- or Stapling-specific test cases.

Fixes https://github.com/letsencrypt/boulder/issues/8179
2025-05-16 11:51:02 -07:00
..
proto Update protoc-gen-go to match updated grpc libraries (#8151) 2025-05-01 17:14:57 -07:00
testdata Deprecate ECDSAForAll feature and remove ECDSAAllowList (#7560) 2024-06-26 10:38:51 -04:00
ca.go Remove OCSP and MustStaple support from issuance (#8181) 2025-05-16 11:51:02 -07:00
ca_test.go Remove OCSP and MustStaple support from issuance (#8181) 2025-05-16 11:51:02 -07:00
crl.go Fix reference bug in CA.noteSignError (#7534) 2024-06-07 15:34:02 -04:00
crl_test.go Better compile-time type checking for gRPC server implementations (#7504) 2024-05-28 09:26:29 -07:00
ocsp.go Fix reference bug in CA.noteSignError (#7534) 2024-06-07 15:34:02 -04:00
ocsp_test.go issuance: remove profile hashes (#8118) 2025-04-16 16:57:24 -07:00