Add go1.21rc2 to the matrix of go versions we test against. Add a new step to our CI workflows (boulder-ci, try-release, and release) which sets the "GOEXPERIMENT=loopvar" environment variable if we're running go1.21. This experiment makes it so that loop variables are scoped only to their single loop iteration, rather than to the whole loop. This prevents bugs such as our CAA Rechecking incident (https://bugzilla.mozilla.org/show_bug.cgi?id=1619047). Also add a line to our docker setup to propagate this environment variable into the container, where it can affect builds. Finally, fix one TLS-ALPN-01 test to have the fake subscriber server actually willing to negotiate the acme-tls/1 protocol, so that the ACME server's tls client actually waits to (fail to) get the certificate, instead of dying immediately. This fix is related to the upgrade to go1.21, not the loopvar experiment. Fixes https://github.com/letsencrypt/boulder/issues/6950 |
||
|---|---|---|
| .. | ||
| proto | ||
| caa.go | ||
| caa_test.go | ||
| dns.go | ||
| dns_test.go | ||
| http.go | ||
| http_test.go | ||
| tlsalpn.go | ||
| tlsalpn_test.go | ||
| utf8filter.go | ||
| utf8filter_test.go | ||
| va.go | ||
| va_test.go | ||