boulder/cmd
Aaron Gable ac2dae70f2
cert-checker: add support for ipAddress SANs (#8188)
In cert-checker, inspect both the DNS Names and the IP Addresses
contained within the certificate being examined. Also add a check that
no other kinds of SANs exist in the certificate.

Fixes https://github.com/letsencrypt/boulder/issues/8183
2025-05-16 16:22:56 -07:00
..
admin admin: Fix race in revokeSerials (#8107) 2025-04-08 10:15:25 -07:00
akamai-purger Better compile-time type checking for gRPC server implementations (#7504) 2024-05-28 09:26:29 -07:00
bad-key-revoker database: No longer store or retrieve InitialIP (#7942) 2025-01-13 17:33:59 -05:00
boulder cmd/email-exporter: Initial implementation and integration with WFE (#8018) 2025-03-06 15:20:55 -05:00
boulder-ca policy: Support IP address identifiers (#8173) 2025-05-14 13:49:51 -07:00
boulder-observer Add --addr and/or --debug-addr flags to all commands (#7175) 2023-12-07 17:41:01 -08:00
boulder-publisher Simplify issuance.NameID and how it is used (#7260) 2024-01-17 12:55:56 -08:00
boulder-ra Remove support for OCSP Must-Staple allowlist (#8180) 2025-05-14 16:20:05 -07:00
boulder-sa Simplify the features package (#7204) 2023-12-12 15:51:57 -05:00
boulder-va va/rva: Validate user-agent for http-01 and DoH requests (#8114) 2025-04-15 16:31:08 -04:00
boulder-wfe2 cmd/email-exporter: Initial implementation and integration with WFE (#8018) 2025-03-06 15:20:55 -05:00
ceremony ceremony/issuance: Remove PolicyIdentifiers extension and default to Policies (#7969) 2025-03-12 21:30:06 -04:00
cert-checker cert-checker: add support for ipAddress SANs (#8188) 2025-05-16 16:22:56 -07:00
contact-auditor lint: add sqlclosecheck (#8129) 2025-04-21 11:01:37 -07:00
crl-checker Log version string for more tools at startup (#7087) 2023-09-19 12:46:55 -04:00
crl-storer Simplify the features package (#7204) 2023-12-12 15:51:57 -05:00
crl-updater crl-updater: UpdatePeriod safety check (#8131) 2025-04-21 13:54:14 -07:00
email-exporter cmd/email-exporter: Initial implementation and integration with WFE (#8018) 2025-03-06 15:20:55 -05:00
expiration-mailer sa: use internal certificateStatusModel instead of core.CertificateStatus (#8159) 2025-05-12 14:53:08 -07:00
id-exporter Update go versions in CI and release (#7971) 2025-02-19 14:37:01 -08:00
log-validator Add --addr and/or --debug-addr flags to all commands (#7175) 2023-12-07 17:41:01 -08:00
nonce-service WFE/nonce: Remove deprecated NoncePrefixKey field (#7825) 2025-02-06 15:32:49 -08:00
notify-mailer Remove repeated words in comments (#7445) 2024-04-23 10:30:33 -04:00
ocsp-responder doc: add detail on ShutdownStopTimeout (#7921) 2025-01-07 13:28:36 -08:00
remoteva va/rva: Validate user-agent for http-01 and DoH requests (#8114) 2025-04-15 16:31:08 -04:00
reversed-hostname-checker policy: Support IP address identifiers (#8173) 2025-05-14 13:49:51 -07:00
rocsp-tool sa: use internal certificateStatusModel instead of core.CertificateStatus (#8159) 2025-05-12 14:53:08 -07:00
sfe doc: add detail on ShutdownStopTimeout (#7921) 2025-01-07 13:28:36 -08:00
testdata Allow validating config.Duration type (#7564) 2024-06-27 13:45:19 -04:00
clock_generic.go Update golangci-lint from v1.29.0 to v1.42.1 (#5745) 2021-10-22 16:26:59 -07:00
clock_integration.go gRPC: reject request if clock skew is too large (#7686) 2024-08-29 11:32:24 -07:00
config.go policy: Support IP address identifiers (#8173) 2025-05-14 13:49:51 -07:00
config_test.go config: Use hex-encoding for HMACKey (#7950) 2025-01-15 14:28:09 -05:00
registry.go main: Validate config files by default (#6885) 2023-05-15 14:16:04 -04:00
shell.go cmd: Make a debug listen address optional (#7840) 2024-12-10 12:25:12 -08:00
shell_test.go policy: Support IP address identifiers (#8173) 2025-05-14 13:49:51 -07:00