7
66%
master: 66%

Ran 31 Jul 2019 07:20PM UTC

Files 102

Run time 38s

Badge

Embed ▾

Committed 31 Jul 2019 07:08PM UTC coverage: 61.61% (+0.04%) from 61.573%

Job # RUN="coverage" CONTAINER="netaccess"

Build Type

push

travis-ci

Committed by

web-flow

Commit Message

 CA: implement CFSSL/zlint pre-issuance linting. (#4378)

The `test/config-next` CA configs are both updated to use `zlint` to lint TBS
pre-certificates with a throw-away key and treat any lint findings >=
`lints.Pass` as an error, blocking the CA from signing the TBS pre-cert with its
private key.

The CA `issuePrecertificateInner` function is updated to specifically catch
linting related errors from CFSSL to marshal the linting findings to the audit
log. A small unit test for this change is included.

The CA `IssueCertificateForPrecertificate` function remains unchanged: the CFSSL
interface that defines `SignFromPrecert` doesn't facilitate linting. We still
lint final certificates post-issuance with `cert-checker` and accept the
possibility there may be some compliance issues that could occur between the
precertificate passing linting and the final certificate being signed.

Resolves https://github.com/letsencrypt/boulder/issues/4255

Run Details

11526 of 18708 relevant lines covered (61.61%)

0.69 hits per line

letsencrypt / boulder / 11014 / 7
66%
master: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 11014.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 11014 / 7 66% master: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 11014.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 11014 / 7
66%
master: 66%

README BADGES
x