letsencrypt / pebble

9%

master: 8%

LAST BUILD ON BRANCH certid-normalize-serial

branch: certid-normalize-serial

CHANGE BRANCH

x

Reset

• certid-normalize-serial
• account-challgne-00
• add-dns-persist-support
• add-dns-persist-support-part-2
• already-replaced
• ari-override
• ari-response-type
• ari-truncate
• better-release
• challtestsrv-log-less
• cpu-custom-redirect-status-code
• cpu-docker-use-go12
• cpu-fix-cname-clear
• cpu-fix-keyrollover-err-check
• cpu-go-1-13
• cpu-go-1-13-now
• cpu-go-go-speed-racer
• cpu-go12
• cpu-mention-non-default-ports
• cpu-mock-servfail
• cpu-no-account-id-field-marshal
• cpu-no-clock-dep
• cpu-no-pebble-client
• cpu-pag-dir-and-nonce
• cpu-readme-subprobs
• cpu-repo-normalize
• cpu-stricter-than-your-gradeschool-teacher
• cpu-tls-one-three
• cpu-use-latest-docker
• crl-handler
• crl-serving-and-tests
• crl-signing
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.1.4
• dependabot/go_modules/github.com/miekg/dns-1.1.25
• dependabot/go_modules/golang.org/x/crypto-0.35.0
• dependabot/go_modules/golang.org/x/net-0.36.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dependabot/go_modules/golang.org/x/net-0.55.0
• dns-persist-01
• dont-update-absent-parent-order
• ecdsa-chains
• feat/update-workflows
• fix-akid_certs
• fix-ci
• fix-lints-ci
• fix-order-recursive-rlock
• http-chunked-encoded-requests
• inahga/zizmor
• invalid-profile
• jit-persost
• main
• master
• mattm-deps
• mattm-go-jose
• mattm-go-jose-4.1.3
• mattm-golangci-lint-2
• mattm-golangcilint
• mattm-golangcilint-2.9.0
• mldsa-chains
• newcert
• no-finalize-loc
• optional-comments-pr536
• order-for-display-race
• orders-not-deactivated
• parseTimeAlgoCheck
• patch-1
• paul.wouters-Rcode-fix
• pzduniak/fips-safe-ski
• rand-seed
• reason-code-allowlist
• replace-docker-login-action
• revocation-race-fix
• revoked-duplicate
• sslkeylog
• tcp-retry
• test-cpu-go-go-speed-racer
• update-dns-account-01
• user-action
• useragent
• v2.0.1
• v2.0.2
• v2.1.0
• v2.2.0
• v2.2.1
• v2.2.2
• v2.3.0
• v2.3.1
• vancluever-profile-default-promote

Build # 35880095069

Build Type

Pull #556

github

Committed by shyney7

Commit Message

Normalize the serial in NewCertID so ARI replaces lookups match

ARI certIDs carry the serial as DER INTEGER value bytes, which include a
leading 0x00 when the top bit is set. Issued certificates are indexed by
the hex of big.Int.Bytes(), which has no such byte, so a replaces
request for those certificates failed to find the original order.

Fixes #550

Pull Request Pull Request #556: Normalize the serial in NewCertID so ARI replaces lookups match

Coverage Stats

3 of 3 new or added lines in 1 file covered. (100.0%)

442 of 4664 relevant lines covered (9.48%)

1.71 hits per line