boulder/test
Aaron Gable 86c8a23a1a
Add fermat factorization integration test (#6613)
Add an integration test which verifies that we reject finalize requests
with CSRs containing a fermat-factorizable public key.

Originally this change was also going to remove our Fermat factorization
implementation from good_key.go, and simply rely on the similar check in
zlint's e_rsa_fermat_factorization check. However, while relying solely
on the lint works, it causes us to block such requests with a 500
serverInternal error, because we consider failing lints to be our fault.
This would be a regression from the current status quo, where such
requests are rejected with a 400 badCSR error and details of the
factorization, so we are leaving our goodkey checks in place.
2023-01-27 10:15:38 -08:00
..
akamai-test-srv Use io and os instead of deprecated ioutil (#6286) 2022-08-10 13:30:17 -07:00
block-a-key Block keys using hex(sha256(spki)). (#4745) 2020-04-09 09:41:33 -07:00
boulder-tools Change GHA release workflow to not use artifacts (#6590) 2023-01-19 14:30:26 -08:00
cert-ceremonies Use io and os instead of deprecated ioutil (#6286) 2022-08-10 13:30:17 -07:00
config VA: Use default PortConfig during testing (#6609) 2023-01-25 16:16:08 -05:00
config-next ocsp-responder: make db config optional (#6601) 2023-01-26 15:21:39 -08:00
consul grpc: Allow static host override in client config (#6423) 2022-10-03 15:23:55 -07:00
ct-test-srv ctpolicy: Remove deprecated codepath and fix metrics (#6485) 2022-11-07 11:31:20 -08:00
grafana Python upgrade os upgrades and travis config cleanup (#5186) 2020-11-23 18:12:04 -08:00
grpc-creds grpc: Allow static host override in client config (#6423) 2022-10-03 15:23:55 -07:00
health-checker Streamline gRPC client creation (#6472) 2022-10-28 08:45:52 -07:00
hierarchy CRLs: include IssuingDistributionPoint extension (#6412) 2022-10-24 11:21:55 -07:00
inmem dependencies: Replace square/go-jose.v2 with go-jose/go-jose.v2 (#6598) 2023-01-24 12:08:30 -05:00
integration Add fermat factorization integration test (#6613) 2023-01-27 10:15:38 -08:00
load-generator VA: Use default PortConfig during testing (#6609) 2023-01-25 16:16:08 -05:00
mail-test-srv log: allow logging to stdout/stderr instead of syslog (#6307) 2022-08-29 06:19:22 -07:00
ocsp checkocsp: allow fetching by serial number (#6413) 2022-11-15 15:52:59 -08:00
prometheus boulder-observer (#5315) 2021-03-29 12:56:54 -07:00
redis-tls Add Redis to Boulder's docker-compose (#5747) 2021-10-28 10:36:11 -07:00
s3-test-srv Create new crl-storer service (#6264) 2022-08-08 16:22:48 -07:00
secrets log: fix spurious honeycomb warnings; improve stdout logger (#6364) 2022-09-14 11:25:02 -07:00
vars SA: Use separate schema for incidents tables (#6350) 2022-09-09 15:17:14 -07:00
wfe-tls Add Redis to Boulder's docker-compose (#5747) 2021-10-28 10:36:11 -07:00
PKI.md grpc: Implement a static multiple IP address gRPC resolver (#6270) 2022-08-05 10:20:57 -07:00
asserts.go Tests: use reflect.IsNil() to avoid boxed nil issues (#6305) 2022-08-19 14:47:34 -07:00
certs.go Use io and os instead of deprecated ioutil (#6286) 2022-08-10 13:30:17 -07:00
challtestsrv.py challtestsrv.py: change address of target (#6234) 2022-07-18 11:10:00 -07:00
chisel2.py VA: Use default PortConfig during testing (#6609) 2023-01-25 16:16:08 -05:00
create_db.sh test: Support multiple database schemas (#6344) 2022-09-07 14:59:08 -07:00
db.go SA: Use separate schema for incidents tables (#6350) 2022-09-09 15:17:14 -07:00
entrypoint-netaccess.sh Add rocsp-tool to manually store OCSP responses in Redis (#5758) 2021-11-02 11:04:03 -07:00
entrypoint.sh entrypoint: fix quoting (#6178) 2022-06-17 15:52:49 -07:00
example-bad-key-revoker-template Add bad-key-revoker daemon (#4788) 2020-04-23 11:51:59 -07:00
example-blocked-keys.yaml Block keys using hex(sha256(spki)). (#4745) 2020-04-09 09:41:33 -07:00
example-weak-keys.json Basic RSA known weak key checking (#2765) 2017-05-25 09:33:58 -07:00
helpers.py akamai-purger: Deprecate PurgeInterval config field (#6489) 2022-11-04 12:44:35 -07:00
hostname-policy.yaml PA: Support YAML for hostname policy. (#4180) 2019-04-26 14:35:28 -04:00
integration-test.py Add support for subcommands to "boulder" command (#6426) 2022-10-06 11:21:47 -07:00
issuer-ocsp-responder.json integration: save hierarchy across runs (#5729) 2021-10-20 17:06:33 -07:00
rate-limit-policies-b.yml Add lower, faster duplicate certificate rate limit (#5401) 2021-05-17 14:50:29 -07:00
rate-limit-policies.yml RA: Implement leaky bucket for duplicate certificate limit (#6262) 2022-07-29 17:39:31 -07:00
redis-cli.sh Add doc and debugging tool for Redis (#5885) 2022-01-18 18:32:37 -08:00
redis-cluster.config grpc/rocsp: Allow use of TLSv1.2 and TLSv1.3 (#6600) 2023-01-24 12:53:13 -08:00
redis-create.sh ROCSP: Replace Redis Cluster with a consistently sharded all-primary nodes (#6516) 2022-12-19 15:06:47 -05:00
redis.config grpc/rocsp: Allow use of TLSv1.2 and TLSv1.3 (#6600) 2023-01-24 12:53:13 -08:00
startservers.py VA: Use default PortConfig during testing (#6609) 2023-01-25 16:16:08 -05:00
test-ca-cross.pem wfe: implement alternate certificate chains (#4714) 2020-03-24 12:43:26 -07:00
test-ca.der Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-ca.key Make it easier to start a test config. 2015-04-09 18:26:40 -07:00
test-ca.key-pkcs11.json Switch to OS-provided SoftHSM2. (#5365) 2021-03-30 17:37:58 -07:00
test-ca.key.der Add DER form of test-ca key in-tree. (#2041) 2016-07-12 09:06:59 -07:00
test-ca.pem Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-ca.pubkey.pem Fix test pubkey files. (#4826) 2020-05-27 12:30:47 -07:00
test-ca2-cross.pem wfe: implement alternate certificate chains (#4714) 2020-03-24 12:43:26 -07:00
test-ca2.pem Add multi-issuer support to the CA. 2016-03-21 20:56:58 -07:00
test-caa-log-checker.sh Add support for subcommands to "boulder" command (#6426) 2022-10-06 11:21:47 -07:00
test-ee.key WFE: Always use precert revocation path (#5227) 2021-01-20 16:00:11 -08:00
test-ee.pem WFE: Always use precert revocation path (#5227) 2021-01-20 16:00:11 -08:00
test-example.key Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
test-example.pem Implement TLS-ALPN-01 and integration test for it (#3654) 2018-06-06 13:04:09 -04:00
test-key-5.der Fix wfe2 key rollover (#3373) 2018-01-18 14:31:48 -08:00
test-root.der Update pkcs11key to v4 (#4602) 2019-12-09 10:03:33 -08:00
test-root.key Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-root.key-pkcs11.json Switch to OS-provided SoftHSM2. (#5365) 2021-03-30 17:37:58 -07:00
test-root.key.der Improve single-ocsp command (#2181) 2016-09-15 15:28:54 -07:00
test-root.pem Unflake OCSP integration test 2015-10-21 14:38:15 -07:00
test-root.pubkey.pem Fix test pubkey files. (#4826) 2020-05-27 12:30:47 -07:00
test-root2.key wfe: implement alternate certificate chains (#4714) 2020-03-24 12:43:26 -07:00
test-root2.pem wfe: implement alternate certificate chains (#4714) 2020-03-24 12:43:26 -07:00
v2_integration.py VA: Use default PortConfig during testing (#6609) 2023-01-25 16:16:08 -05:00
wait-for-it.sh Quiet the output of wait-for-it (#5775) 2021-11-05 11:38:20 -07:00