boulder/va
Aaron Gable dc14caf907
Add MPICFullResults feature flag to turn off VA early return (#8046)
Add a new "MPICFullResults" feature flag. When this flag is enabled in
the VA, it will wait for all Remote VAs to return their results for both
Domain Control Validation and CAA checking, rather than short-circuiting
as soon as it has seen enough results to know whether corroboration will
or will not be achieved.

We make this change because waiting for these to return honestly doesn't
take that long, because we do validation (although not CAA rechecking)
asynchronously, and because it improves the quality of our MPIC quorum
summary logs (so we don't always say only 3/4 concurred because the
fourth was cancelled).

Fixes https://github.com/letsencrypt/boulder/issues/7809
2025-03-11 08:49:05 -07:00
..
config Add a new remoteva binary (#7437) 2024-05-06 16:29:29 -04:00
proto va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
caa.go va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
caa_test.go va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
dns.go va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
dns_test.go va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
http.go va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
http_test.go va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
tlsalpn.go va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
tlsalpn_test.go va: Support IP address identifiers (#8020) 2025-03-06 11:39:22 -08:00
utf8filter.go
utf8filter_test.go
va.go Add MPICFullResults feature flag to turn off VA early return (#8046) 2025-03-11 08:49:05 -07:00
va_test.go Add MPICFullResults feature flag to turn off VA early return (#8046) 2025-03-11 08:49:05 -07:00