letsencrypt / pebble / 2130

8%

cron

travis-ci-com

Add a blocklist for Order identifiers (#331)

Adds a new config value, `BlockedDomains`, which is a list of strings
representing domains for which Pebble should not issue certificates.
Adding a blocked domain such as "example.com" prevents issuance
for all subdomains of that name (e.g. "foo.example.com") as well.
If an order is rejected due to one of its names matching this blocklist,
the request will return a `rejectedIdentifier` error. This mirrors the
functionality of Boulder's Policy Authority.

Also slightly refactors the frontend's order verification code to split
domain-specific (as opposed to generic or ip-specific) checks into
their own helper function.

4 of 4 new or added lines in 1 file covered. (100.0%)

0 of 78 relevant lines covered (0.0%)

0.0 hits per line