7
66%
master: 66%

Ran 13 Sep 2019 06:06AM UTC

Files 107

Run time 4s

Badge

Embed ▾

Committed 09 Sep 2019 07:21PM UTC coverage: 61.165%. Remained the same

Job # RUN="coverage" CONTAINER="netaccess"

Build Type

cron

travis-ci

Committed by

web-flow

Commit Message

Generate and store OCSP at precertificate signing time (#4420)

This change adds two tables and two methods in the SA, to store precertificates
and serial numbers.

In the CA, when the feature flag is turned on, we generate a serial number, store it,
sign a precertificate and OCSP, store them, and then return the precertificate. Storing
the serial as an additional step before signing the certificate adds an extra layer of
insurance against duplicate serials, and also serves as a check on database availability.
Since an error storing the serial prevents going on to sign the precertificate, this decreases
the chance of signing something while the database is down.

Right now, neither table has read operations available in the SA.

To make this work, I needed to remove the check for duplicate certificateStatus entry
when inserting a final certificate and its OCSP response. I also needed to remove
an error that can occur when expiration-mailer processes a precertificate that lacks
a final certificate. That error would otherwise have prevented further processing of
expiration warnings.

Fixes #4412

This change builds on #4417, please review that first for ease of review.

Run Details

11592 of 18952 relevant lines covered (61.17%)

0.68 hits per line

letsencrypt / boulder / 11164 / 7
66%
master: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 11164.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 11164 / 7 66% master: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 11164.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 11164 / 7
66%
master: 66%

README BADGES
x