letsencrypt / pebble

0%

master: 8%

LAST BUILD ON BRANCH v2.1.0

branch: v2.1.0

CHANGE BRANCH

x

Reset

• v2.1.0
• cpu-repo-normalize
• master
• cpu-mention-non-default-ports
• v2.0.1
• cpu-no-pebble-client
• cpu-go12
• cpu-no-account-id-field-marshal
• cpu-no-clock-dep
• cpu-go-go-speed-racer
• test-cpu-go-go-speed-racer
• v2.0.2
• cpu-custom-redirect-status-code
• cpu-stricter-than-your-gradeschool-teacher
• v2.2.0
• cpu-use-latest-docker
• cpu-docker-use-go12
• v2.2.1
• v2.2.2
• cpu-fix-cname-clear
• cpu-mock-servfail
• cpu-go-1-13
• cpu-fix-keyrollover-err-check
• cpu-tls-one-three
• cpu-go-1-13-now
• cpu-pag-dir-and-nonce
• v2.3.0
• orders-not-deactivated
• rand-seed
• v2.3.1
• fix-ci
• dependabot/go_modules/github.com/miekg/dns-1.1.25
• challtestsrv-log-less
• main

Build # 1379

Build Type

push

travis-ci

Committed by web-flow

Commit Message

WFE: reject legacy JWS requests in -strict (#246)

* wfe: reject out-of-spec chall POST in strict.

Challenge POST JWS bodies should be exactly `{}` per RFC 8555 Section
7.5.1. In `-strict` reject anything else.

* wfe: reject JWS JSON with non-empty "resource".

The "resource" field of a JSON JWS body is a legacy artifact of ACME v1
and should not be sent in RFC 8555/ACME v2 requests. Reject these
requests in `-strict` mode.

Run Details

0 of 58 relevant lines covered (0.0%)

0.0 hits per line