boulder/test
Daniel McCarney 2f3c703a72 va: add specific error for broken HTTP-01 redirects. (#4171)
Often folks will mis-configure their webserver to send an HTTP redirect missing
a `/' between the FQDN and the path.

E.g. in Apache using:

Redirect / https://bad-redirect.org

Instead of:

Redirect / https://bad-redirect.org/

Will produce an invalid HTTP-01 redirect target like:

https://bad-redirect.org.well-known/acme-challenge/xxxx

This happens frequently enough we want to return a distinct error message
for this case by detecting the redirect targets ending in ".well-known".

After the "Simple HTTP-01" code landed this case was previously getting an error
message of the form:
> "Invalid hostname in redirect target, must end in IANA registered TLD"

Resolves https://github.com/letsencrypt/boulder/issues/3606
2019-04-23 10:50:47 -07:00
..
akamai-test-srv Remove Akamai CCU v2 support (#3994) 2019-01-08 12:28:11 -08:00
authz-filler Limit number of authzs purged at once. (#3177) 2017-10-23 11:20:07 -07:00
boulder-tools Remove Go 1.11.5 from tag-and-upload.sh. (#4149) 2019-04-09 12:47:31 -07:00
config Improve integration tests (#4143) 2019-04-04 10:59:38 -07:00
config-next tests: rework multi-va integration tests. (#4169) 2019-04-18 17:06:24 -07:00
ct-test-srv Improve integration tests (#4143) 2019-04-04 10:59:38 -07:00
grafana Update Boulderdash (#3232) 2017-11-13 13:22:45 -05:00
grpc-creds Add a standalone akamai purger service (#4040) 2019-02-05 09:00:31 -08:00
load-generator load-generator: create externalState file if it doesn't exist. (#4146) 2019-04-05 18:56:21 -04:00
mail-test-srv Provide formatting logger functions. (#3699) 2018-05-10 11:06:29 -07:00
ocsp Fix ineffectual assignments (#4052) 2019-02-13 15:39:58 -05:00
prometheus Add Prometheus collection for WFE to default config. (#2675) 2017-04-13 10:07:28 -07:00
sd-test-srv Update gRPC (#3817) 2018-08-20 10:55:42 -04:00
secrets Switch to DSNs (#4044) 2019-02-11 10:46:07 -08:00
vars Fix max_statement_time and long_query_time (#2311) 2016-11-08 09:07:36 -05:00
wfe-tls Remove redundant wfe-tls/README.txt. (#3678) 2018-05-01 09:24:27 -04:00
PKI.md Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
cfssl-config.json Move cert-csr check to boulder/core and review fixes 2015-06-02 17:56:28 +01:00
challtestsrv.py VA: Fix SimplifiedVAHTTP01 redirect query param handling. (#3988) 2019-01-04 14:20:44 -05:00
chisel.py VA: Fix SimplifiedVAHTTP01 redirect query param handling. (#3988) 2019-01-04 14:20:44 -05:00
chisel2.py Unshadow v2 integration tests. (#4131) 2019-03-20 17:11:49 -07:00
create_db.sh Increase the MySQL container `max_connections`. (#3543) 2018-03-10 16:05:52 -05:00
ct-key.pem Use a EC key to sign CT signatures, plus properly load it 2015-12-15 13:50:43 -08:00
db-common.sh * Delete Policy DB.This is no longer needed now that we have a JSON policy file.* Fix tests.* Revert Dockerfile.* Fix create_db* Simplify user addition.* Fix tests.* Fix tests* Review fixes.https://github.com/letsencrypt/boulder/pull/1773 2016-04-29 12:12:24 -07:00
db.go * Delete Policy DB.This is no longer needed now that we have a JSON policy file.* Fix tests.* Revert Dockerfile.* Fix create_db* Simplify user addition.* Fix tests.* Fix tests* Review fixes.https://github.com/letsencrypt/boulder/pull/1773 2016-04-29 12:12:24 -07:00
drop_users.sql Add cmd/expired-authz-purger (#1828) 2016-06-03 16:00:19 -04:00
entrypoint-netaccess.sh Deconflict netaccess and boulder containers. (#3785) 2018-06-29 12:35:19 -04:00
entrypoint.sh Fix wait_tcp_port in test/entrypoint.sh (#3763) 2018-06-15 08:45:30 -04:00
example-expiration-template Review fixes 2015-07-27 12:46:09 -07:00
example-weak-keys.json Basic RSA known weak key checking (#2765) 2017-05-25 09:33:58 -07:00
helpers.py Improve integration tests (#4143) 2019-04-04 10:59:38 -07:00
hostname-policy.json Add explicit forbidden names validation to cert-checker (#2373) 2016-12-02 11:55:24 -08:00
integration-test.py tests: initialize caa_client var before ref. (#4166) 2019-04-18 14:07:18 -04:00
issuer-ocsp-responder.json Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
make-softhsm.sh Switch to using go 1.9 (#3047) 2017-09-06 16:30:13 -04:00
migrate-up.sh Add a test that there are no outdated migrations. 2015-09-18 14:53:40 -07:00
mock-vendor.go Force godep to vendor github.com/golang/mock/mockgen/model (#2792) 2017-05-31 16:09:44 -07:00
rate-limit-policies-b.yml Remove `TotalCertificates` rate limit. (#3638) 2018-04-12 13:25:47 -07:00
rate-limit-policies.yml Remove `TotalCertificates` rate limit. (#3638) 2018-04-12 13:25:47 -07:00
requirements.txt Fix issuerCert in test configs. (#3310) 2018-01-09 07:56:39 -05:00
sa_db_users.sql Remove GRANTS for tables that no longer exist. (#3979) 2018-12-11 12:55:33 -05:00
startservers.py load-generator: support all challenge types, run in CI. (#4140) 2019-04-04 11:44:14 -07:00
test-ca.der Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-ca.key Make it easier to start a test config. 2015-04-09 18:26:40 -07:00
test-ca.key-pkcs11.json Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
test-ca.key.der Add DER form of test-ca key in-tree. (#2041) 2016-07-12 09:06:59 -07:00
test-ca.pem Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-ca2.pem Add multi-issuer support to the CA. 2016-03-21 20:56:58 -07:00
test-example.key Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
test-example.pem Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
test-key-5.der Fix wfe2 key rollover (#3373) 2018-01-18 14:31:48 -08:00
test-no-outdated-migrations.sh Fix mktemp to be MacOS compatible 2015-09-23 13:16:16 -07:00
test-root.key Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-root.key-pkcs11.json Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
test-root.key.der Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
test-root.pem Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-tools.go Enforce type equality in test.AssertEquals (#4111) 2019-03-14 11:51:57 -07:00
travis-before-install.sh use go_import_path setting in Travis CI (#2923) 2017-07-31 10:47:55 -07:00
v1_integration.py Deprecate renewal rate limiting feature flags (#4161) 2019-04-17 12:39:08 -07:00
v2_integration.py va: add specific error for broken HTTP-01 redirects. (#4171) 2019-04-23 10:50:47 -07:00