letsencrypt
/
boulder
mirror of https://github.com/letsencrypt/boulder.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
boulder/test
History
Aaron Gable d16d3fd067
Remove OCSPStaleMaxAge config value and handling (#4911) 
The OCSPStaleMaxAge config value was added in #2419 as part of an
effort to ensure that ocsp-updater's queries of the certificateStatus
table were efficient. It was never intended as a long-term fix:
in #2431 and #2432 the query was updated to index on the much more
efficient isExpired and notAfter columns if a feature flag was set,
and in #2561 that code path was made the default and the flag removed.

However, the `WHERE ocspLastUpdate > ocspStaleMaxAge` clause has
remained in the query. This is redundant, as the ocspStaleMaxAge has
always been set to 5040 hours, or 210 days, significantly longer than
the 90-day expiration of Let's Encrypt certs.

This change removes that clause from the query, and removes the config
scaffolding around it. In addition, it updates the tests to remove
workarounds necessitated by this column, and simplifies and documents
them for future readers.

Fixes #4884
 		2020-06-29 12:42:51 -07:00
..
akamai-test-srv Fix nits found by staticcheck (#4726) 2020-03-30 10:20:20 -07:00
authz-filler gofmt code with -s (simplify) flag (#4763) 2020-04-08 17:25:35 -07:00
block-a-key Block keys using hex(sha256(spki)). (#4745) 2020-04-09 09:41:33 -07:00
boulder-tools Use cmd/ceremony in integration tests (#4832) 2020-06-03 15:20:23 -07:00
cert-ceremonies cmd/ceremony: merge single-ocsp tool into ceremony (#4878) 2020-06-23 11:30:31 -07:00
config Remove OCSPStaleMaxAge config value and handling (#4911) 2020-06-29 12:42:51 -07:00
config-next Remove OCSPStaleMaxAge config value and handling (#4911) 2020-06-29 12:42:51 -07:00
ct-test-srv publisher: allow custom UA for CT submissions. (#4492) 2019-10-21 15:08:03 -04:00
grafana Update Boulderdash (#3232) 2017-11-13 13:22:45 -05:00
grpc-creds Add bad-key-revoker daemon (#4788) 2020-04-23 11:51:59 -07:00
integration Fix pass-through of revoke reason in ocsp-updater. (#4880) 2020-06-18 17:37:32 -07:00
load-generator Handful of revocation pkg cleanups (#4801) 2020-04-30 17:29:42 -07:00
mail-test-srv Fix nits found by staticcheck (#4726) 2020-03-30 10:20:20 -07:00
ocsp ocspcheck: verify validity period of signing certificate (#4852) 2020-06-08 13:56:35 -07:00
prometheus Add Prometheus collection for WFE to default config. (#2675) 2017-04-13 10:07:28 -07:00
sd-test-srv Fix nits found by staticcheck (#4726) 2020-03-30 10:20:20 -07:00
secrets Add bad-key-revoker daemon (#4788) 2020-04-23 11:51:59 -07:00
vars SA: add unit test for auto_increment schemas. (#4586) 2019-12-02 11:33:36 -05:00
wfe-tls Remove redundant wfe-tls/README.txt. (#3678) 2018-05-01 09:24:27 -04:00
PKI.md Use cmd/ceremony in integration tests (#4832) 2020-06-03 15:20:23 -07:00
challtestsrv.py integration: use python3 (#4582) 2019-11-28 09:54:58 -05:00
chisel.py Port v1 integration tests to v2. (#4807) 2020-05-13 11:59:04 -07:00
chisel2.py Port v1 integration tests to v2. (#4807) 2020-05-13 11:59:04 -07:00
create_db.sh Increase the MySQL container `max_connections`. (#3543) 2018-03-10 16:05:52 -05:00
db-common.sh * Delete Policy DB.This is no longer needed now that we have a JSON policy file.* Fix tests.* Revert Dockerfile.* Fix create_db* Simplify user addition.* Fix tests.* Fix tests* Review fixes.https://github.com/letsencrypt/boulder/pull/1773 2016-04-29 12:12:24 -07:00
db.go * Delete Policy DB.This is no longer needed now that we have a JSON policy file.* Fix tests.* Revert Dockerfile.* Fix create_db* Simplify user addition.* Fix tests.* Fix tests* Review fixes.https://github.com/letsencrypt/boulder/pull/1773 2016-04-29 12:12:24 -07:00
entrypoint-netaccess.sh Log message typo in entrypoint-netaccess.sh (#4708) 2020-03-17 11:31:18 -07:00
entrypoint.sh Use cmd/ceremony in integration tests (#4832) 2020-06-03 15:20:23 -07:00
example-bad-key-revoker-template Add bad-key-revoker daemon (#4788) 2020-04-23 11:51:59 -07:00
example-blocked-keys.yaml Block keys using hex(sha256(spki)). (#4745) 2020-04-09 09:41:33 -07:00
example-expiration-template Review fixes 2015-07-27 12:46:09 -07:00
example-multiva-policy.yaml va: exempt multi-va enforcement by domain/acct ID. (#4458) 2019-10-07 16:43:11 -04:00
example-weak-keys.json Basic RSA known weak key checking (#2765) 2017-05-25 09:33:58 -07:00
helpers.py Use cmd/ceremony in integration tests (#4832) 2020-06-03 15:20:23 -07:00
hostname-policy.yaml PA: Support YAML for hostname policy. (#4180) 2019-04-26 14:35:28 -04:00
integration-test.py cmd/ceremony: merge single-ocsp tool into ceremony (#4878) 2020-06-23 11:30:31 -07:00
issuer-ocsp-responder.json cmd/ceremony: merge single-ocsp tool into ceremony (#4878) 2020-06-23 11:30:31 -07:00
mock-vendor.go Fix nits found by staticcheck (#4726) 2020-03-30 10:20:20 -07:00
rate-limit-policies-b.yml Remove `TotalCertificates` rate limit. (#3638) 2018-04-12 13:25:47 -07:00
rate-limit-policies.yml va: exempt multi-va enforcement by domain/acct ID. (#4458) 2019-10-07 16:43:11 -04:00
sa_db_users.sql Fix up NoRows handling in bad-key-revoker. (#4874) 2020-06-23 11:31:21 -07:00
startservers.py Improve integration tests. (#4847) 2020-06-04 19:43:28 -07:00
test-ca-cross.pem wfe: implement alternate certificate chains (#4714) 2020-03-24 12:43:26 -07:00
test-ca.der Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-ca.key Make it easier to start a test config. 2015-04-09 18:26:40 -07:00
test-ca.key-pkcs11.json Use cmd/ceremony in integration tests (#4832) 2020-06-03 15:20:23 -07:00
test-ca.key.der Add DER form of test-ca key in-tree. (#2041) 2016-07-12 09:06:59 -07:00
test-ca.pem Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-ca.pubkey.pem Fix test pubkey files. (#4826) 2020-05-27 12:30:47 -07:00
test-ca2-cross.pem wfe: implement alternate certificate chains (#4714) 2020-03-24 12:43:26 -07:00
test-ca2.pem Add multi-issuer support to the CA. 2016-03-21 20:56:58 -07:00
test-example.key Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
test-example.pem Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
test-key-5.der Fix wfe2 key rollover (#3373) 2018-01-18 14:31:48 -08:00
test-no-outdated-migrations.sh Fix mktemp to be MacOS compatible 2015-09-23 13:16:16 -07:00
test-root.der Update pkcs11key to v4 (#4602) 2019-12-09 10:03:33 -08:00
test-root.key Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-root.key-pkcs11.json Use cmd/ceremony in integration tests (#4832) 2020-06-03 15:20:23 -07:00
test-root.key.der Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
test-root.pem Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-root.pubkey.pem Fix test pubkey files. (#4826) 2020-05-27 12:30:47 -07:00
test-root2.key wfe: implement alternate certificate chains (#4714) 2020-03-24 12:43:26 -07:00
test-root2.pem wfe: implement alternate certificate chains (#4714) 2020-03-24 12:43:26 -07:00
test-tools.go Remove unused code. (#4722) 2020-03-27 11:55:42 -07:00
v1_integration.py Use cmd/ceremony in integration tests (#4832) 2020-06-03 15:20:23 -07:00
v2_integration.py Use cmd/ceremony in integration tests (#4832) 2020-06-03 15:20:23 -07:00