13181
66%
master: 66%

Ran 10 Nov 2020 05:26PM UTC

Jobs 1

Files 114

Run time 27s

Badge

Embed ▾

Committed 10 Nov 2020 05:21PM UTC coverage: 65.299% (+0.04%) from 65.256%

Build # 13181

Build Type

push

travis-pro

Committed by

web-flow

Commit Message

Add multi-issuer support to ocsp-responder (#5154)

The ocsp-responder takes a path to a certificate file as one of
its config values. It uses this path as one of the inputs when
constructing its DBSource, the object responsible for querying
the database for pregenerated OCSP responses to fulfill requests.

However, this certificate file is not necessary to query the
database; rather, it only acts as a filter: OCSP requests whose
IssuerKeyHash do not match the hash of the loaded certificate are
rejected outright, without querying the DB. In addition, there is
currently only support for a single certificate file in the config.

This change adds support for multiple issuer certificate files in
the config, and refactors the pre-database filtering of bad OCSP
requests into a helper object dedicated solely to that purpose.

Fixes #5119

Run Details

13287 of 20348 relevant lines covered (65.3%)

0.73 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
7	13181.7 (RUN="coverage" CONTAINER="netaccess")	10 Nov 2020 05:26PM UTC	114	65.3	Travis Job 13181.7

letsencrypt / boulder / 13181
66%
master: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 13181

letsencrypt / boulder / 13181 66% master: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 13181

letsencrypt / boulder / 13181
66%
master: 66%

README BADGES
x