letsencrypt / pebble

0%

master: 8%

LAST BUILD ON BRANCH v2.0.2

branch: v2.0.2

CHANGE BRANCH

x

Reset

• v2.0.2
• account-challgne-00
• ari-override
• ari-response-type
• ari-truncate
• challtestsrv-log-less
• cpu-custom-redirect-status-code
• cpu-docker-use-go12
• cpu-fix-cname-clear
• cpu-fix-keyrollover-err-check
• cpu-go-1-13
• cpu-go-1-13-now
• cpu-go-go-speed-racer
• cpu-go12
• cpu-mention-non-default-ports
• cpu-mock-servfail
• cpu-no-account-id-field-marshal
• cpu-no-clock-dep
• cpu-no-pebble-client
• cpu-pag-dir-and-nonce
• cpu-readme-subprobs
• cpu-repo-normalize
• cpu-stricter-than-your-gradeschool-teacher
• cpu-tls-one-three
• cpu-use-latest-docker
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
• dependabot/go_modules/github.com/miekg/dns-1.1.25
• dependabot/go_modules/golang.org/x/crypto-0.35.0
• dependabot/go_modules/golang.org/x/net-0.36.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• ecdsa-chains
• fix-akid_certs
• fix-ci
• http-chunked-encoded-requests
• invalid-profile
• main
• master
• mattm-deps
• mattm-go-jose
• mattm-go-jose-4.1.3
• mattm-golangci-lint-2
• mattm-golangcilint
• mldsa-chains
• newcert
• no-finalize-loc
• order-for-display-race
• orders-not-deactivated
• parseTimeAlgoCheck
• rand-seed
• revoked-duplicate
• sslkeylog
• test-cpu-go-go-speed-racer
• update-dns-account-01
• user-action
• v2.0.1
• v2.1.0
• v2.2.0
• v2.2.1
• v2.2.2
• v2.3.0
• v2.3.1
• vancluever-profile-default-promote

Build # 1214

Build Type

push

travis-ci

Committed by jsha

Commit Message

fix dataraces, add -race install, add load-gen. (#232)

The `Authz()` method of the WFE was racey. First because it didn't lock the authorizations and orders it was working with. Second because the handling of displaying authorization challenges was working with `acme.Challenge` objects owned by `core.Challenge`'s that should have been locked for reading but were not. This mean the VA would datarace with the WFE when updating a validated challenge status.

To prevent future occurrences `travis.yml` is updated to install Pebble with the race detector enabled, and to run Pebble such that it will exit non-zero if a race is detected.

Since `Chisel2.py` is single threaded the Boulder `load-generator` is used for a short duration to drive concurrent request traffic. In practice before fixing the dataraces I found this would crash Pebble <30s.

Resolves https://github.com/letsencrypt/pebble/issues/230
Resolves https://github.com/letsencrypt/pebble/issues/228

Run Details

0 of 53 relevant lines covered (0.0%)

0.0 hits per line