11014
66%

Ran 31 Jul 2019 07:20PM UTC

Jobs 1

Files 102

Run time 57s

Badge

Embed ▾

Committed 31 Jul 2019 07:08PM UTC coverage: 61.61% (+0.04%) from 61.573%

Build # 11014

Build Type

push

travis-ci

Committed by

web-flow

Commit Message

 CA: implement CFSSL/zlint pre-issuance linting. (#4378)

The `test/config-next` CA configs are both updated to use `zlint` to lint TBS
pre-certificates with a throw-away key and treat any lint findings >=
`lints.Pass` as an error, blocking the CA from signing the TBS pre-cert with its
private key.

The CA `issuePrecertificateInner` function is updated to specifically catch
linting related errors from CFSSL to marshal the linting findings to the audit
log. A small unit test for this change is included.

The CA `IssueCertificateForPrecertificate` function remains unchanged: the CFSSL
interface that defines `SignFromPrecert` doesn't facilitate linting. We still
lint final certificates post-issuance with `cert-checker` and accept the
possibility there may be some compliance issues that could occur between the
precertificate passing linting and the final certificate being signed.

Resolves https://github.com/letsencrypt/boulder/issues/4255

Run Details

11526 of 18708 relevant lines covered (61.61%)

0.69 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
7	11014.7 (RUN="coverage" CONTAINER="netaccess")	31 Jul 2019 07:20PM UTC	0	61.61	Travis Job 11014.7

Source Files on build 11014

Detailed source file information is not available for this build.

letsencrypt / boulder / 11014
66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 11014

letsencrypt / boulder / 11014 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 11014

letsencrypt / boulder / 11014
66%

README BADGES
x