boulder/cmd
Aaron Gable 0196d7e876
orphan-finder: use serial + issuerID for OCSP (#5383)
Update orphan-finder's `generateOCSP` function to make its request to
the CA using the certificate's serial number and issuer ID, rather than
the full DER bytes. To facilitate this, add an `IssuerCerts` item to the
orphan-finder config, and add an `issuers` map to its struct, mimicking
fields of the same name and purpose on the RA. Leave the old code path
in the `generateOCSP` method for now, to be fully removed after the new
config has been deployed.

Also update the unittests to use real on-disk certificates instead of
inline strings, and similarly correct the integration test to use a
certificate with the correct Issuer field.

Part of #5079
Fixes #5149
2021-04-05 09:13:21 -07:00
..
admin-revoker RA: Use Serial+IssuerID for revocation (#5376) 2021-04-02 08:20:20 -07:00
akamai-purger Update grpc and protobuf to latest. (#5369) 2021-04-01 17:18:15 -07:00
bad-key-revoker Remove dbconfig migration deployability code (#5348) 2021-03-18 16:41:15 -07:00
boulder-ca Remove dbconfig migration deployability code (#5348) 2021-03-18 16:41:15 -07:00
boulder-janitor Standardize on `AssertMetricWithLabelsEquals` (#5371) 2021-04-01 15:20:43 -07:00
boulder-observer boulder-observer (#5315) 2021-03-29 12:56:54 -07:00
boulder-publisher Remove common config from publisher (#5353) 2021-03-18 16:59:06 -07:00
boulder-ra Remove va gRPC wrapper (#5328) 2021-03-11 15:38:50 -08:00
boulder-sa Remove dbconfig migration deployability code (#5348) 2021-03-18 16:41:15 -07:00
boulder-va Remove Common.DNSResolver from VA config (#5355) 2021-03-19 10:02:04 -07:00
boulder-wfe Remove cmd.LoadCert in favor of core.LoadCert (#5165) 2020-11-10 13:00:46 -08:00
boulder-wfe2 Move core loadChain functionality from boulder-wfe to issuance (#5271) 2021-02-04 16:41:25 -08:00
caa-log-checker cmd/caa-log-checker: non-zero exit when errors are found (#5041) 2020-08-27 13:57:37 -07:00
ceremony Remove extensions from ceremony generateCSR (#5326) 2021-03-10 15:44:29 -08:00
cert-checker Update zlint to v3.1.0 (#5373) 2021-03-31 11:42:01 -07:00
expiration-mailer Remove dbconfig migration deployability code (#5348) 2021-03-18 16:41:15 -07:00
expired-authz-purger2 Move expired-authz-purger2 config to test directory (#5352) 2021-03-18 17:56:25 -07:00
id-exporter Remove dbconfig migration deployability code (#5348) 2021-03-18 16:41:15 -07:00
log-validator Reduce chance of log-validator having runaway output. (#4926) 2020-07-10 11:16:18 -07:00
nonce-service Update grpc and protobuf to latest. (#5369) 2021-04-01 17:18:15 -07:00
notify-mailer Remove dbconfig migration deployability code (#5348) 2021-03-18 16:41:15 -07:00
ocsp-responder Remove common config from ocsp-responder (#5350) 2021-03-18 17:16:37 -07:00
ocsp-updater Standardize on `AssertMetricWithLabelsEquals` (#5371) 2021-04-01 15:20:43 -07:00
orphan-finder orphan-finder: use serial + issuerID for OCSP (#5383) 2021-04-05 09:13:21 -07:00
testdata Switch to DSNs (#4044) 2019-02-11 10:46:07 -08:00
clock_generic.go Replace clock.Default() with clock.New() (#4761) 2020-04-08 17:23:43 -07:00
clock_integration.go Provide formatting logger functions. (#3699) 2018-05-10 11:06:29 -07:00
config.go Remove dbconfig migration deployability code (#5348) 2021-03-18 16:41:15 -07:00
config_test.go Remove dbconfig migration deployability code (#5348) 2021-03-18 16:41:15 -07:00
shell.go Remove CFSSL issuance path (#5347) 2021-03-18 16:39:52 -07:00
shell_test.go Remove CFSSL issuance path (#5347) 2021-03-18 16:39:52 -07:00