letsencrypt / pebble
10%
master: 8%

LAST BUILD BRANCH: persist-draft-02
DEFAULT BRANCH: master
Repo Added
Files 18
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH persist-draft-02
branch: SELECT
CHANGE BRANCH
x

coverage: 10.266% (+0.8%) from 9.477%
38533917139

Pull #566

github

orangepizza 
Update dns-persist-01 impl to newest draft

use calculate account hash format, as defined in draft-ietf-acme-dns-persist-02 , instead of using accounturi as is.
Pull Request #566: Update dns-persist-01 impl to draft-ietf-acme-dns-persist-02

47 of 74 new or added lines in 3 files covered. (63.51%)

486 of 4734 relevant lines covered (10.27%)

3.14 hits per line

Relevant lines Covered
4734 RELEVANT LINES 486 COVERED LINES
3.14 HITS PER LINE
Source Files on master

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
38533917139 persist-draft-02 Update dns-persist-01 impl to newest draft use calculate account hash format, as defined in draft-ietf-acme-dns-persist-02 , instead of using accounturi as is. Pull #566 orangepizza github
10.27
38208169530 mldsa-certs Allow ML-DSA end entity certificates Pull #565 alebastr github
9.47
36970480394 fix-authz-lock-order-deadlock Fix deadlock from taking db lock while holding authz lock in Authz() Authz() held the authorization's write lock while it looked up the account, which takes the MemoryStore read lock. FindValidAuthorization takes the same two locks in the opposit... Pull #564 wallrj-cyberark github
9.47
36477763631 main Normalize the serial in NewCertID so ARI replaces lookups match (#556) When a certificate's serial starts with a byte >= 0x80, ACME clients put an extra `00` in front of it in the ARI certID. That's correct, since RFC 9773 asks for the DER intege... push web-flow github
9.48
36292524459 crl-serving-and-tests Serve a CRL when configured, and test it in CI Add the crlListenAddress, crlBaseURL, crlMaxDelay and crlValidity config fields and their PEBBLE_CRL_* environment overrides. When both the listen address and base URL are set, Pebble serves its CRL ... Pull #562 Preston12321 github
14.25
36292428832 crl-handler wfe: Add a CRL handler and record when revocations reach the CRL Add CRLHandler, which serves a freshly signed CRL at the CA's CRL URL, and set CRLVisibleAt on revoked certificates so that revocations appear on the CRL after a random delay. The ... Pull #561 Preston12321 github
13.2
36292344234 crl-signing ca: Add support for building and signing a CRL Add an optional CRLConfig to the CA. When it's set, issued certificates include a CRL Distribution Point, and GetCRL returns a CRL signed by the leaf-issuing intermediate with every revoked certifica... Pull #560 Preston12321 github
12.73
36292204789 reason-code-allowlist Only accept revocation reasons 0, 1, 3, 4, 5 and 9 Replace the check for reasons 7 and >10 with an allowlist. This also rejects cACompromise (2), which applies only to CA certificates; certificateHold (6), which the Baseline Requirements forbid; ... Pull #558 Preston12321 github
11.54
36283887341 revocation-race-fix Fix race condition in db.MemoryStore.RevokeCertificate() Pull #557 Preston12321 github
11.46
35880095069 certid-normalize-serial Normalize the serial in NewCertID so ARI replaces lookups match ARI certIDs carry the serial as DER INTEGER value bytes, which include a leading 0x00 when the top bit is set. Issued certificates are indexed by the hex of big.Int.Bytes(), which ha... Pull #556 shyney7 github
9.48
See All Builds (1506)