letsencrypt / pebble

12%

master: 8%

LAST BUILD ON BRANCH reason-code-allowlist

branch: reason-code-allowlist

CHANGE BRANCH

x

Reset

• reason-code-allowlist
• account-challgne-00
• add-dns-persist-support
• add-dns-persist-support-part-2
• already-replaced
• ari-override
• ari-response-type
• ari-truncate
• better-release
• certid-normalize-serial
• challtestsrv-log-less
• cpu-custom-redirect-status-code
• cpu-docker-use-go12
• cpu-fix-cname-clear
• cpu-fix-keyrollover-err-check
• cpu-go-1-13
• cpu-go-1-13-now
• cpu-go-go-speed-racer
• cpu-go12
• cpu-mention-non-default-ports
• cpu-mock-servfail
• cpu-no-account-id-field-marshal
• cpu-no-clock-dep
• cpu-no-pebble-client
• cpu-pag-dir-and-nonce
• cpu-readme-subprobs
• cpu-repo-normalize
• cpu-stricter-than-your-gradeschool-teacher
• cpu-tls-one-three
• cpu-use-latest-docker
• crl-handler
• crl-serving-and-tests
• crl-signing
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.1.4
• dependabot/go_modules/github.com/miekg/dns-1.1.25
• dependabot/go_modules/golang.org/x/crypto-0.35.0
• dependabot/go_modules/golang.org/x/net-0.36.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dependabot/go_modules/golang.org/x/net-0.55.0
• dns-persist-01
• dont-update-absent-parent-order
• ecdsa-chains
• feat/update-workflows
• fix-akid_certs
• fix-ci
• fix-lints-ci
• fix-order-recursive-rlock
• http-chunked-encoded-requests
• inahga/zizmor
• invalid-profile
• jit-persost
• main
• master
• mattm-deps
• mattm-go-jose
• mattm-go-jose-4.1.3
• mattm-golangci-lint-2
• mattm-golangcilint
• mattm-golangcilint-2.9.0
• mldsa-chains
• newcert
• no-finalize-loc
• optional-comments-pr536
• order-for-display-race
• orders-not-deactivated
• parseTimeAlgoCheck
• patch-1
• paul.wouters-Rcode-fix
• pzduniak/fips-safe-ski
• rand-seed
• replace-docker-login-action
• revocation-race-fix
• revoked-duplicate
• sslkeylog
• tcp-retry
• test-cpu-go-go-speed-racer
• update-dns-account-01
• user-action
• useragent
• v2.0.1
• v2.0.2
• v2.1.0
• v2.2.0
• v2.2.1
• v2.2.2
• v2.3.0
• v2.3.1
• vancluever-profile-default-promote

Build # 36292204789

Build Type

Pull #558

github

Committed by Preston12321

Commit Message

Only accept revocation reasons 0, 1, 3, 4, 5 and 9

Replace the check for reasons 7 and >10 with an allowlist. This also
rejects cACompromise (2), which applies only to CA certificates;
certificateHold (6), which the Baseline Requirements forbid;
removeFromCRL (8), which is only allowed in delta CRLs; and aACompromise
(10), which applies only to attribute authorities.

Pull Request Pull Request #558: Only accept revocation reasons 0, 1, 3, 4, 5 and 9

Coverage Stats

1 of 1 new or added line in 1 file covered. (100.0%)

539 of 4669 relevant lines covered (11.54%)

1.97 hits per line