boulder
boulder copied to clipboard
letsencrypt
An ACME-based certificate authority, written in Go.
Similar to how SA instances are marked unhealthy if they can't talk to the database.
Today, we set gRPC timeouts on a per-service basis. So, for example, every request from the RA to the SA has the same timeout set, no matter whether that request...
Right now we record latency for an overall submission attempt, including retries. We'd like to be able to get some metrics on how long each request takes (and what it...
admin: Add subcommands for importing, exporting, adding, enabling and disabling rate limit overrides
- [ ] Deprecate the DOH feature flag - [ ] Remove `BOULDER_CONFIG_DIR` checks for DOH sensitive integration tests (Bump this to #8121 (and update the relevant TODOs) if you...
In 2020 we imported grpc-go's health_v1 implementation, and began checking this status in startservers.py: https://github.com/letsencrypt/boulder/pull/5074 In 2023 we added support for deep checks to all boulder services and actually implemented...
It's likely to be useful to support blocking issuance for IP address identifiers (both single and within prefixes) the same way we can block domain names.
Once issuance for IP address identifiers is enabled in production, update `test/config` to mirror the config changes, and remove `config-next` gating in integration tests.
## Summary This PR introduces the **foundational components** required to support the `dns-account-01` challenge type, as specified in [draft-ietf-acme-dns-account-label-00](https://datatracker.ietf.org/doc/draft-ietf-acme-dns-account-label/). This is the **first in a series of changes** aiming to...
Metadata
Owner
Metadata
An ACME-based certificate authority, written in Go.