11162
66%

Ran 11 Sep 2019 06:06AM UTC

Jobs 1

Files 107

Run time 9s

Badge

Embed ▾

Committed 09 Sep 2019 07:21PM UTC coverage: 61.165%. Remained the same

Build # 11162

Build Type

cron

travis-ci

Committed by

web-flow

Commit Message

Generate and store OCSP at precertificate signing time (#4420)

This change adds two tables and two methods in the SA, to store precertificates
and serial numbers.

In the CA, when the feature flag is turned on, we generate a serial number, store it,
sign a precertificate and OCSP, store them, and then return the precertificate. Storing
the serial as an additional step before signing the certificate adds an extra layer of
insurance against duplicate serials, and also serves as a check on database availability.
Since an error storing the serial prevents going on to sign the precertificate, this decreases
the chance of signing something while the database is down.

Right now, neither table has read operations available in the SA.

To make this work, I needed to remove the check for duplicate certificateStatus entry
when inserting a final certificate and its OCSP response. I also needed to remove
an error that can occur when expiration-mailer processes a precertificate that lacks
a final certificate. That error would otherwise have prevented further processing of
expiration warnings.

Fixes #4412

This change builds on #4417, please review that first for ease of review.

Run Details

11592 of 18952 relevant lines covered (61.17%)

0.68 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
7	11162.7 (RUN="coverage" CONTAINER="netaccess")	11 Sep 2019 06:05AM UTC	0	61.17	Travis Job 11162.7

Source Files on build 11162

Detailed source file information is not available for this build.

letsencrypt / boulder / 11162
66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 11162

letsencrypt / boulder / 11162 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 11162

letsencrypt / boulder / 11162
66%

README BADGES
x