Samantha b141fa7c78 WFE: Correct Error Handling for Nonce Redemption RPCs with Unknown Prefixes (#7004) ... Fix an issue related to the custom gRPC Picker implementation introduced in #6618. When a nonce contained a prefix not associated with a known backend, the Picker would continuously rebuild, re-resolve DNS, and eventually throw a 500 "Server Error" at RPC timeout. The Picker now promptly returns a 400 "Bad Nonce" error as expected, in response the requesting client should retry their request with a fresh nonce. Additionally: - WFE unit tests use derived nonces when `"BOULDER_CONFIG_DIR" == "test/config-next"`. - `Balancer.Build()` in "noncebalancer" forces a rebuild until non-zero backends are available. This matches the [balancer/roundrobin](d524b40946/balancer/roundrobin/roundrobin.go (L49-L53)) implementation. - Nonces with no matching backend increment "jose_errors" with label `"type": "JWSInvalidNonce"` and "nonce_no_backend_found". - Nonces of incorrect length are now rejected at the WFE and increment "jose_errors" with label `"type": "JWSMalformedNonce"` instead of `"type": "JWSInvalidNonce"`. - Nonces not encoded as base64url are now rejected at the WFE and increment "jose_errors" with label `"type": "JWSMalformedNonce"` instead of `"type": "JWSInvalidNonce"`. Fixes #6969 Part of #6974		2023-07-28 12:07:52 -04:00
..
proto	Update boulder-tools dependencies (#6129)	2022-05-20 14:24:01 -07:00
nonce.go	WFE: Correct Error Handling for Nonce Redemption RPCs with Unknown Prefixes (#7004)	2023-07-28 12:07:52 -04:00
nonce_test.go	Add grpc implementation tests to all services (#6782)	2023-03-31 09:52:26 -07:00