7f49867ae9
Truncating to the hour does not provide any meaningful protection against signature preimage attacks, and can cause the thisUpdate and producedAt fields to differ by up to 59 minutes from each other. Instead, truncate to the minute, to match how x/crypto/ocsp sets the producedAt field. Fixes https://github.com/letsencrypt/boulder/issues/7190 |
||
|---|---|---|
| .. | ||
| proto | ||
| testdata | ||
| ca.go | ||
| ca_test.go | ||
| crl.go | ||
| crl_test.go | ||
| ecdsa_allow_list.go | ||
| ecdsa_allow_list_test.go | ||
| ocsp.go | ||
| ocsp_test.go | ||