boulder/cmd
James Renken 3e6a8e2d25
va: Support IP address identifiers (#8020)
Add an `identifier` field to the `va.PerformValidationRequest` proto, which will soon replace its `dnsName` field.

Accept and prefer the `identifier` field in every VA function that uses this struct. Don't (yet) assume it will be present.

Throughout the VA, accept and handle the IP address identifier type. Handling is similar to DNS names, except that `getAddrs` is not called, and consider that:
- IPs are represented in a different field in the `x509.Certificate` struct.
- IPs must be presented as reverse DNS (`.arpa`) names in SNI for [TLS-ALPN-01 challenge requests](https://datatracker.ietf.org/doc/html/rfc8738#name-tls-with-application-layer-).
- IPv6 addresses are enclosed in square brackets when composing or parsing URLs.

For HTTP-01 challenges, accept redirects to bare IP addresses, which were previously rejected.

Fixes #2706
Part of #7311
2025-03-06 11:39:22 -08:00
..
admin Update go versions in CI and release (#7971) 2025-02-19 14:37:01 -08:00
akamai-purger Better compile-time type checking for gRPC server implementations (#7504) 2024-05-28 09:26:29 -07:00
bad-key-revoker database: No longer store or retrieve InitialIP (#7942) 2025-01-13 17:33:59 -05:00
boulder Remove the dead admin-revoker tool (#7941) 2025-01-13 17:05:15 -08:00
boulder-ca ca: unsplit issuance flow (#8014) 2025-02-24 11:37:17 -08:00
boulder-observer Add --addr and/or --debug-addr flags to all commands (#7175) 2023-12-07 17:41:01 -08:00
boulder-publisher Simplify issuance.NameID and how it is used (#7260) 2024-01-17 12:55:56 -08:00
boulder-ra RA: Control MaxNames via profile (#8019) 2025-02-27 15:51:00 -06:00
boulder-sa Simplify the features package (#7204) 2023-12-12 15:51:57 -05:00
boulder-va va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
boulder-wfe2 RA: Control MaxNames via profile (#8019) 2025-02-27 15:51:00 -06:00
ceremony Update go versions in CI and release (#7971) 2025-02-19 14:37:01 -08:00
cert-checker Update go versions in CI and release (#7971) 2025-02-19 14:37:01 -08:00
contact-auditor ratelimit: Remove legacy registrations per IP implementation (#7760) 2024-11-19 18:39:21 -05:00
crl-checker Log version string for more tools at startup (#7087) 2023-09-19 12:46:55 -04:00
crl-storer Simplify the features package (#7204) 2023-12-12 15:51:57 -05:00
crl-updater crl: add cache control headers (#8011) 2025-02-13 14:20:29 -08:00
expiration-mailer Remove logging of contact email addresses (#7833) 2024-11-25 13:33:56 -08:00
id-exporter Update go versions in CI and release (#7971) 2025-02-19 14:37:01 -08:00
log-validator Add --addr and/or --debug-addr flags to all commands (#7175) 2023-12-07 17:41:01 -08:00
nonce-service WFE/nonce: Remove deprecated NoncePrefixKey field (#7825) 2025-02-06 15:32:49 -08:00
notify-mailer Remove repeated words in comments (#7445) 2024-04-23 10:30:33 -04:00
ocsp-responder doc: add detail on ShutdownStopTimeout (#7921) 2025-01-07 13:28:36 -08:00
remoteva va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
reversed-hostname-checker PA: Improve wildcard exact blocklist implementation (#7218) 2023-12-19 14:22:18 -05:00
rocsp-tool Update go versions in CI and release (#7971) 2025-02-19 14:37:01 -08:00
sfe doc: add detail on ShutdownStopTimeout (#7921) 2025-01-07 13:28:36 -08:00
testdata Allow validating config.Duration type (#7564) 2024-06-27 13:45:19 -04:00
clock_generic.go Update golangci-lint from v1.29.0 to v1.42.1 (#5745) 2021-10-22 16:26:59 -07:00
clock_integration.go gRPC: reject request if clock skew is too large (#7686) 2024-08-29 11:32:24 -07:00
config.go config: Use hex-encoding for HMACKey (#7950) 2025-01-15 14:28:09 -05:00
config_test.go config: Use hex-encoding for HMACKey (#7950) 2025-01-15 14:28:09 -05:00
registry.go main: Validate config files by default (#6885) 2023-05-15 14:16:04 -04:00
shell.go cmd: Make a debug listen address optional (#7840) 2024-12-10 12:25:12 -08:00
shell_test.go Update go versions in CI and release (#7971) 2025-02-19 14:37:01 -08:00