boulder
boulder copied to clipboard
letsencrypt
An ACME-based certificate authority, written in Go.
As a developer and maintainer, I want the build system to efficiently support both amd64 and arm64 architectures so that: - Local development builds only target the current architecture for...
- Add consul health checking for all gRPC endpoints - Cut consul health checking interval from 2s to 1s and add a 500ms timeout (default: 10s) to solve for CI...
**Objective**: make all Boulder tests runnable just by running `go test ./...`. **Obstacle 1**: Some of the RA tests are backed by insufficient fakes, and instead rely on an in-memory...
Now that we have other container images in the github registry, we should consolidate on just using the one.
We'd like to transition to building our release artifacts with containers (and also produce containers as our main release artifact). As part of that, let's get rid of our Makefile....
Right now our integration tests run `go install ./...` inside a boulder-tools container, then run the resulting binaries. Instead, they should use the same build scripts that our release process...
Right now we use fetch-and-verify-go.sh to download Go from `dl.google.com` and verify its GPG signature. This is preferable to using the Docker Hub official `golang` images because we can always...
We don't have coverage of IP identifiers within //test/integration/validation_test.go. This work is blocked on https://github.com/letsencrypt/challtestsrv/issues/27
RFC 8738 places a restriction on the format in which we render IP address identifiers to ACME clients: > The value field of the identifier MUST contain the textual form...
Today, we [use the public suffix list](https://github.com/letsencrypt/boulder/blob/868214b85eaf3ce0d0691a9f008e3de92697bdf1/iana/iana.go#L18) to determine whether a given domain name ends in an ICANN-recognized suffix. This works well enough, but it's not really what the PSL...
Metadata
Owner
Metadata
An ACME-based certificate authority, written in Go.