boulder
boulder copied to clipboard
letsencrypt
An ACME-based certificate authority, written in Go.
Add a new "OmitShortLivedRevocation" feature flag. When this flag is enabled in the CA, reset the AIA OCSP URL to be nil. Fixes https://github.com/letsencrypt/boulder/issues/7673 DO NOT MERGE: we're not yet...
When creating an authorization, populate it with all challenges appropriate for that challenge type, regardless of whether those challenge types are currently "enabled" in the config. This ensures that authorizations...
- [ ] Remove `if wfe.limiter == nil && wfe.txnBuilder == nil` in `checkNewAccountLimits` and `checkNewOrderLimits` WFE methods. - [ ] Remove `if ra.limiter == nil && ra.txnBuilder == nil`...
Assuming the v3 ballot passes, we should add the following changes to Boulder to ease compliance: These first two implement logging requirement 5.4.1(7), which becomes effective March 15, 2025: -...
Per MPIC ballot, we should record this explicitly in audit logs. We need to make sure that we can distinguish between a positive failure from an RVA versus not waiting...
We do pre-issuance linting using zlint to ensure that we are compliant with the baseline requirements and various root program requirements. As [Bug 1715455](https://bugzilla.mozilla.org/show_bug.cgi?id=1715455) shows, it is possible to still...
Since this is important information about an authorization.
After a recent pull, I was getting errors running the integration tests because `test/certs/ipki/sfe.boulder/` didn't exist. That's because `sfe.boulder` was recently added to the list of services, but `generate.sh` doesn't...
Metadata
Owner
Metadata
An ACME-based certificate authority, written in Go.