letsencrypt / pebble

0%

master: 8%

LAST BUILD ON BRANCH v2.2.0

branch: v2.2.0

CHANGE BRANCH

x

Reset

• v2.2.0
• account-challgne-00
• ari-override
• ari-response-type
• ari-truncate
• better-release
• challtestsrv-log-less
• cpu-custom-redirect-status-code
• cpu-docker-use-go12
• cpu-fix-cname-clear
• cpu-fix-keyrollover-err-check
• cpu-go-1-13
• cpu-go-1-13-now
• cpu-go-go-speed-racer
• cpu-go12
• cpu-mention-non-default-ports
• cpu-mock-servfail
• cpu-no-account-id-field-marshal
• cpu-no-clock-dep
• cpu-no-pebble-client
• cpu-pag-dir-and-nonce
• cpu-readme-subprobs
• cpu-repo-normalize
• cpu-stricter-than-your-gradeschool-teacher
• cpu-tls-one-three
• cpu-use-latest-docker
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.0.5
• dependabot/go_modules/github.com/miekg/dns-1.1.25
• dependabot/go_modules/golang.org/x/crypto-0.35.0
• dependabot/go_modules/golang.org/x/net-0.36.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dont-update-absent-parent-order
• ecdsa-chains
• fix-akid_certs
• fix-ci
• http-chunked-encoded-requests
• invalid-profile
• main
• master
• mattm-deps
• mattm-go-jose
• mattm-go-jose-4.1.3
• mattm-golangci-lint-2
• mattm-golangcilint
• mldsa-chains
• newcert
• no-finalize-loc
• order-for-display-race
• orders-not-deactivated
• parseTimeAlgoCheck
• rand-seed
• revoked-duplicate
• sslkeylog
• test-cpu-go-go-speed-racer
• update-dns-account-01
• user-action
• v2.0.1
• v2.0.2
• v2.1.0
• v2.2.1
• v2.2.2
• v2.3.0
• v2.3.1
• vancluever-profile-default-promote

Build # 1485

Build Type

push

travis-ci

Committed by web-flow

Commit Message

WFE: reject legacy JWS requests in -strict (#246)

* wfe: reject out-of-spec chall POST in strict.

Challenge POST JWS bodies should be exactly `{}` per RFC 8555 Section
7.5.1. In `-strict` reject anything else.

* wfe: reject JWS JSON with non-empty "resource".

The "resource" field of a JSON JWS body is a legacy artifact of ACME v1
and should not be sent in RFC 8555/ACME v2 requests. Reject these
requests in `-strict` mode.

Run Details

0 of 58 relevant lines covered (0.0%)

0.0 hits per line