boulder/web
Aaron Gable c5a28cd26d
WFE: Refuse to finalize orders with unrecognized profiles (#7988)
The current profiles draft
(https://datatracker.ietf.org/doc/draft-aaron-acme-profiles/00/) says:

> If a server receives a request to finalize an Order whose profile the
> CA is no longer willing to issue under, it MUST respond with a
> problem document of type "invalidProfile".  The server SHOULD attempt
> to avoid this situation, e.g. by ensuring that all Orders for a
> profile have expired before it stops issuing under that profile.

Add types and helper functions representing this new error type to the
berrors, probs, and web packages. Update the WFE code which rejects
new-order requests with unrecognized profiles to use these new types,
and add similar code to the WFE's finalize path. Update the unit and
integration tests to reflect the fact that we now configure at least one
profile in both Staging and Prod (tracked in IN-10574).
2025-01-30 14:10:02 -08:00
..
context.go ra: log User-Agent (#7908) 2025-01-14 13:39:41 -08:00
context_test.go web: add feature flag PropagateCancels (#7778) 2024-11-04 14:37:29 -08:00
docs.go Factor out context.go from wfe and wfe2. (#3086) 2017-09-26 13:54:14 -04:00
jwk.go Upgrade go-jose from v2.6.1 to v.4.0.1 (#7345) 2024-04-02 17:49:51 -04:00
probs.go WFE: Refuse to finalize orders with unrecognized profiles (#7988) 2025-01-30 14:10:02 -08:00
probs_test.go Lay the groundwork for supporting IP identifiers (#7692) 2024-08-30 11:40:38 -07:00
relative.go Remove BaseURL from WFE config. (#3540) 2018-03-09 11:04:02 +00:00
send_error.go WFE: Suppress logging of probs.PausedProblem (#7719) 2024-09-26 11:20:26 -04:00
send_error_test.go WFE: Suppress logging of probs.PausedProblem (#7719) 2024-09-26 11:20:26 -04:00
server.go sfe: Implement self-service frontend for account pausing/unpausing (#7500) 2024-07-10 10:52:33 -04:00
server_test.go sfe: Implement self-service frontend for account pausing/unpausing (#7500) 2024-07-10 10:52:33 -04:00