letsencrypt / pebble / 36292524459

14%

master: 8%

Pull #562

github

Serve a CRL when configured, and test it in CI

Add the crlListenAddress, crlBaseURL, crlMaxDelay and crlValidity config
fields and their PEBBLE_CRL_* environment overrides. When both the
listen address and base URL are set, Pebble serves its CRL over plain
HTTP.

Document CRL support in the README and docker-compose.yml, expose port
4003 in the release image, and extend chisel2.py to revoke a certificate
and check that it appears on the CRL with the right reason.

61 of 77 new or added lines in 1 file covered. (79.22%)

690 of 4841 relevant lines covered (14.25%)

4.31 hits per line