boulder/cmd
Aaron Gable 8545ea8364
KeyPolicy: add custom constructor and make all fields private (#7543)
Change how goodkey.KeyPolicy keeps track of allowed RSA and ECDSA key
sizes, to make it slightly more flexible while still retaining the very
locked-down allowlist of only 6 acceptable key sizes (RSA 2048, 3076,
and 4092, and ECDSA P256, P384, and P521). Add a new constructor which
takes in a collection of allowed key sizes, so that users of the goodkey
package can customize which keys they accept. Rename the existing
constructor to make it clear that it uses hardcoded default values.

With these new constructors available, make all of the goodkey.KeyPolicy
member fields private, so that a KeyPolicy can only be built via these
constructors.
2024-06-18 17:52:50 -04:00
..
admin Use generic types for gRPC stream implementations (#7501) 2024-05-24 13:54:25 -07:00
admin-revoker Strip old admin-revoker down to bare bones (#7317) 2024-03-05 12:36:29 -08:00
akamai-purger Better compile-time type checking for gRPC server implementations (#7504) 2024-05-28 09:26:29 -07:00
bad-key-revoker sa: truncate all timestamps to seconds (#7519) 2024-06-12 15:00:24 -07:00
boulder Add a new remoteva binary (#7437) 2024-05-06 16:29:29 -04:00
boulder-ca KeyPolicy: add custom constructor and make all fields private (#7543) 2024-06-18 17:52:50 -04:00
boulder-observer Add --addr and/or --debug-addr flags to all commands (#7175) 2023-12-07 17:41:01 -08:00
boulder-publisher Simplify issuance.NameID and how it is used (#7260) 2024-01-17 12:55:56 -08:00
boulder-ra KeyPolicy: add custom constructor and make all fields private (#7543) 2024-06-18 17:52:50 -04:00
boulder-sa Simplify the features package (#7204) 2023-12-12 15:51:57 -05:00
boulder-va Add a new remoteva binary (#7437) 2024-05-06 16:29:29 -04:00
boulder-wfe2 KeyPolicy: add custom constructor and make all fields private (#7543) 2024-06-18 17:52:50 -04:00
ceremony KeyPolicy: add custom constructor and make all fields private (#7543) 2024-06-18 17:52:50 -04:00
cert-checker KeyPolicy: add custom constructor and make all fields private (#7543) 2024-06-18 17:52:50 -04:00
contact-auditor Log version string for more tools at startup (#7087) 2023-09-19 12:46:55 -04:00
crl-checker Log version string for more tools at startup (#7087) 2023-09-19 12:46:55 -04:00
crl-storer Simplify the features package (#7204) 2023-12-12 15:51:57 -05:00
crl-updater all: use proper deprecation comment (#7273) 2024-01-22 12:26:55 -05:00
expiration-mailer expiration-mailer: Don't audit log "no usable contact address" (#7529) 2024-06-06 18:30:59 -04:00
id-exporter Simplify the features package (#7204) 2023-12-12 15:51:57 -05:00
log-validator Add --addr and/or --debug-addr flags to all commands (#7175) 2023-12-07 17:41:01 -08:00
nonce-service Remove deprecated WFE.RedeemNonceServices (#7493) 2024-05-21 13:13:13 -04:00
notify-mailer Remove repeated words in comments (#7445) 2024-04-23 10:30:33 -04:00
ocsp-responder Dynamically generate grpc-creds at integration test startup (#7477) 2024-05-15 11:31:23 -04:00
remoteva remoteva: Config options to handle alternate deployment models (#7473) 2024-05-13 14:43:40 -04:00
reversed-hostname-checker PA: Improve wildcard exact blocklist implementation (#7218) 2023-12-19 14:22:18 -05:00
rocsp-tool Remove all static minica keys (#7489) 2024-05-17 11:45:40 -07:00
testdata grpc: Consolidate various testdata hierarchies (#7456) 2024-04-29 16:56:18 -07:00
clock_generic.go Update golangci-lint from v1.29.0 to v1.42.1 (#5745) 2021-10-22 16:26:59 -07:00
clock_integration.go cmd: Use non-deprecated clock.New (#7517) 2024-05-31 18:34:39 -07:00
config.go Add a new remoteva binary (#7437) 2024-05-06 16:29:29 -04:00
config_test.go Dynamically generate grpc-creds at integration test startup (#7477) 2024-05-15 11:31:23 -04:00
registry.go main: Validate config files by default (#6885) 2023-05-15 14:16:04 -04:00
shell.go update otel dependencies to v1.27.0 and v0.52.0 (#7496) 2024-05-29 15:46:35 -07:00
shell_test.go Run more go vet checks (#7255) 2024-01-17 12:27:55 -05:00