letsencrypt
/
boulder
mirror of https://github.com/letsencrypt/boulder.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
boulder/ra
History
Samantha Frank 55c274d132
ratelimits: Exempt renewals from NewOrdersPerAccount and CertificatesPerDomain (#7513) 
- Rename `NewOrderRequest` field `LimitsExempt` to `IsARIRenewal`
- Introduce a new `NewOrderRequest` field, `IsRenewal`
- Introduce a new (temporary) feature flag, `CheckRenewalExemptionAtWFE`

WFE:
- Perform renewal detection in the WFE when `CheckRenewalExemptionAtWFE`
is set
- Skip (key-value) `NewOrdersPerAccount` and `CertificatesPerDomain`
limit checks when renewal detection indicates the the order is a
renewal.

RA:
- Leave renewal detection in the RA intact
- Skip renewal detection and (legacy) `NewOrdersPerAccount` and
`CertificatesPerDomain` limit checks when `CheckRenewalExemptionAtWFE`
is set and the `NewOrderRequest` indicates that the order is a renewal.

Fixes #7508
Part of #5545
 		2024-06-27 16:39:31 -04:00
..
proto ratelimits: Exempt renewals from NewOrdersPerAccount and CertificatesPerDomain (#7513) 2024-06-27 16:39:31 -04:00
ra.go ratelimits: Exempt renewals from NewOrdersPerAccount and CertificatesPerDomain (#7513) 2024-06-27 16:39:31 -04:00
ra_test.go ratelimits: Exempt renewals from NewOrdersPerAccount and CertificatesPerDomain (#7513) 2024-06-27 16:39:31 -04:00