boulder/observer
Phil Porada 7ea51e5f91
boulder-observer: check certificate status via CRL too (#8186)
Let's Encrypt [recently removed OCSP URLs from
certificates](https://community.letsencrypt.org/t/removing-ocsp-urls-from-certificates/236699)
which unfortunately caused the boulder-observer TLS prober to panic.
This change short circuits the OCSP checking logic if no OCSP URL exists
in the to-be-checked certificate.

Fixes https://github.com/letsencrypt/boulder/issues/8185

---------

Co-authored-by: Aaron Gable <aaron@letsencrypt.org>
2025-05-20 09:24:21 -07:00
..
obsdialer observer: disable IPv6-to-IPv4 fallback (#7173) 2023-11-28 09:53:20 -08:00
probers boulder-observer: check certificate status via CRL too (#8186) 2025-05-20 09:24:21 -07:00
mon_conf.go observer: add TCP prober (#7118) 2023-10-27 09:11:18 -07:00
mon_conf_test.go Move cmd.ConfigDuration to config.Duration (#6705) 2023-02-28 08:11:49 -08:00
monitor.go observer: Monitors probe immediately instead of waiting a full duration (#6594) 2023-01-24 16:45:19 -05:00
obs_conf.go Remove repeated words in comments (#7445) 2024-04-23 10:30:33 -04:00
obs_conf_test.go Move cmd.ConfigDuration to config.Duration (#6705) 2023-02-28 08:11:49 -08:00
observer.go observer: add TCP prober (#7118) 2023-10-27 09:11:18 -07:00