7
66%
master: 66%

Ran 18 Nov 2019 02:28PM UTC

Files 109

Run time 8s

Badge

Embed ▾

Committed 18 Nov 2019 02:15PM UTC coverage: 64.334% (+0.1%) from 64.216%

Job # RUN="coverage" CONTAINER="netaccess"

Build Type

push

travis-ci

Committed by

cpu

Commit Message

CA/SA: Store issuer info in certificateStatus, use for OCSP generation (#4546)

This avoids needing to send the entire certificate in OCSP generation
RPCs.

Ended up including a few cleanups that made the implementation easier.

Initially I was struggling with how to derive the issuer identification info.
We could just stick the full SPKI hash in certificateStatus, but that takes a
significant amount of space, we could configure unique issuer IDs in the CA
config, but that would require being very careful about keeping the IDs
constant, and never reusing an ID, or we could store issuers in a table in the
database and use that as a lookup table, but that requires figuring out how to
get that info into the table etc. Instead I've just gone with what I found to
be the easiest solution, deriving a stable ID from the cert hash. This means we
don't need to remember to configure anything special and the CA config stays
the same as it is now.

Fixes #4469.

Run Details

11840 of 18404 relevant lines covered (64.33%)

0.72 hits per line

letsencrypt / boulder / 11515 / 7
66%
master: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 11515.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 11515 / 7 66% master: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 11515.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 11515 / 7
66%
master: 66%

README BADGES
x