letsencrypt
/
boulder
mirror of https://github.com/letsencrypt/boulder.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
boulder/test
History
Daniel McCarney c2ad80f774 tests: rework multi-va integration tests. (#4169) 
Rather than having the `BouncerHTTPRequestHandler` bounce/redirect
requests based on how many have arrived it is more reliable to follow
the way we did this in unit tests and decide based on the request
UA. By setting a distinct UA per VA it's possible to more precisely
define how many requests from each VA should be redirected to the
real key authorization.

Using the count was flaky because occasionally the remote VA
requests would arrive before the primary VA expending the VIP
request quota and bouncing the primary VA validation request. The
`test_http_multiva_threshold_pass` unit test expectation was that
since 2 of the 3 requests would pass that the test would pass but
since the primary VA is treated differently (it must always see a
valid result for the remote VA results to be considered) the test
would fail when the requests were scheduled this way.

Something particular to CI seems to result in the primary VA
being scheduled after the remote VA goroutines more often
than on faster machines/local testing. I had very little
luck reproducing locally but in 10 CI builds of master
with the count-based `BouncerHTTPRequestHandler` tests I saw
`test_http_multiva_threshold_pass` fail 2 builds. After switching to
this branch's UA-based `BouncerHTTPRequestHandler` 10/10 builds passed.

Resolves https://github.com/letsencrypt/boulder/issues/4147
 		2019-04-18 17:06:24 -07:00
..
akamai-test-srv Remove Akamai CCU v2 support (#3994) 2019-01-08 12:28:11 -08:00
authz-filler Limit number of authzs purged at once. (#3177) 2017-10-23 11:20:07 -07:00
boulder-tools Remove Go 1.11.5 from tag-and-upload.sh. (#4149) 2019-04-09 12:47:31 -07:00
config Improve integration tests (#4143) 2019-04-04 10:59:38 -07:00
config-next tests: rework multi-va integration tests. (#4169) 2019-04-18 17:06:24 -07:00
ct-test-srv Improve integration tests (#4143) 2019-04-04 10:59:38 -07:00
grafana Update Boulderdash (#3232) 2017-11-13 13:22:45 -05:00
grpc-creds Add a standalone akamai purger service (#4040) 2019-02-05 09:00:31 -08:00
load-generator load-generator: create externalState file if it doesn't exist. (#4146) 2019-04-05 18:56:21 -04:00
mail-test-srv Provide formatting logger functions. (#3699) 2018-05-10 11:06:29 -07:00
ocsp Fix ineffectual assignments (#4052) 2019-02-13 15:39:58 -05:00
prometheus Add Prometheus collection for WFE to default config. (#2675) 2017-04-13 10:07:28 -07:00
sd-test-srv Update gRPC (#3817) 2018-08-20 10:55:42 -04:00
secrets Switch to DSNs (#4044) 2019-02-11 10:46:07 -08:00
vars Fix max_statement_time and long_query_time (#2311) 2016-11-08 09:07:36 -05:00
wfe-tls Remove redundant wfe-tls/README.txt. (#3678) 2018-05-01 09:24:27 -04:00
PKI.md Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
cfssl-config.json Move cert-csr check to boulder/core and review fixes 2015-06-02 17:56:28 +01:00
challtestsrv.py VA: Fix SimplifiedVAHTTP01 redirect query param handling. (#3988) 2019-01-04 14:20:44 -05:00
chisel.py VA: Fix SimplifiedVAHTTP01 redirect query param handling. (#3988) 2019-01-04 14:20:44 -05:00
chisel2.py Unshadow v2 integration tests. (#4131) 2019-03-20 17:11:49 -07:00
create_db.sh Increase the MySQL container `max_connections`. (#3543) 2018-03-10 16:05:52 -05:00
ct-key.pem Use a EC key to sign CT signatures, plus properly load it 2015-12-15 13:50:43 -08:00
db-common.sh * Delete Policy DB.This is no longer needed now that we have a JSON policy file.* Fix tests.* Revert Dockerfile.* Fix create_db* Simplify user addition.* Fix tests.* Fix tests* Review fixes.https://github.com/letsencrypt/boulder/pull/1773 2016-04-29 12:12:24 -07:00
db.go * Delete Policy DB.This is no longer needed now that we have a JSON policy file.* Fix tests.* Revert Dockerfile.* Fix create_db* Simplify user addition.* Fix tests.* Fix tests* Review fixes.https://github.com/letsencrypt/boulder/pull/1773 2016-04-29 12:12:24 -07:00
drop_users.sql Add cmd/expired-authz-purger (#1828) 2016-06-03 16:00:19 -04:00
entrypoint-netaccess.sh Deconflict netaccess and boulder containers. (#3785) 2018-06-29 12:35:19 -04:00
entrypoint.sh Fix wait_tcp_port in test/entrypoint.sh (#3763) 2018-06-15 08:45:30 -04:00
example-expiration-template Review fixes 2015-07-27 12:46:09 -07:00
example-weak-keys.json Basic RSA known weak key checking (#2765) 2017-05-25 09:33:58 -07:00
helpers.py Improve integration tests (#4143) 2019-04-04 10:59:38 -07:00
hostname-policy.json Add explicit forbidden names validation to cert-checker (#2373) 2016-12-02 11:55:24 -08:00
integration-test.py tests: initialize caa_client var before ref. (#4166) 2019-04-18 14:07:18 -04:00
issuer-ocsp-responder.json Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
make-softhsm.sh Switch to using go 1.9 (#3047) 2017-09-06 16:30:13 -04:00
migrate-up.sh Add a test that there are no outdated migrations. 2015-09-18 14:53:40 -07:00
mock-vendor.go Force godep to vendor github.com/golang/mock/mockgen/model (#2792) 2017-05-31 16:09:44 -07:00
rate-limit-policies-b.yml Remove `TotalCertificates` rate limit. (#3638) 2018-04-12 13:25:47 -07:00
rate-limit-policies.yml Remove `TotalCertificates` rate limit. (#3638) 2018-04-12 13:25:47 -07:00
requirements.txt Fix issuerCert in test configs. (#3310) 2018-01-09 07:56:39 -05:00
sa_db_users.sql Remove GRANTS for tables that no longer exist. (#3979) 2018-12-11 12:55:33 -05:00
startservers.py load-generator: support all challenge types, run in CI. (#4140) 2019-04-04 11:44:14 -07:00
test-ca.der Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-ca.key Make it easier to start a test config. 2015-04-09 18:26:40 -07:00
test-ca.key-pkcs11.json Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
test-ca.key.der Add DER form of test-ca key in-tree. (#2041) 2016-07-12 09:06:59 -07:00
test-ca.pem Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-ca2.pem Add multi-issuer support to the CA. 2016-03-21 20:56:58 -07:00
test-example.key Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
test-example.pem Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
test-key-5.der Fix wfe2 key rollover (#3373) 2018-01-18 14:31:48 -08:00
test-no-outdated-migrations.sh Fix mktemp to be MacOS compatible 2015-09-23 13:16:16 -07:00
test-root.key Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-root.key-pkcs11.json Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
test-root.key.der Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
test-root.pem Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-tools.go Enforce type equality in test.AssertEquals (#4111) 2019-03-14 11:51:57 -07:00
travis-before-install.sh use go_import_path setting in Travis CI (#2923) 2017-07-31 10:47:55 -07:00
v1_integration.py Deprecate renewal rate limiting feature flags (#4161) 2019-04-17 12:39:08 -07:00
v2_integration.py tests: rework multi-va integration tests. (#4169) 2019-04-18 17:06:24 -07:00