7
66%
master: 66%

Ran 09 Sep 2020 04:56PM UTC

Files 114

Run time 26min

Badge

Embed ▾

Committed 09 Sep 2020 04:51PM UTC coverage: 65.553% (+0.005%) from 65.548%

Job # RUN="coverage" CONTAINER="netaccess"

Build Type

push

travis-pro

Committed by

web-flow

Commit Message

CA: Set IssuerID when integrating orphaned certs (#5083)

There are two code paths which end up calling the SA's AddPrecertificate
RPC: one "normal" path from inside the CA's IssuePrecertificate
method, and one "exceptional" path from inside the orphan-integration
path which only gets executed if the initial attempt to store the cert
failed for some reason.

The first of these paths always sets the IssuerID in the RPC's
AddCertificateRequest. The latter of these paths never does.
Historically, this has been fine, as the SA has stored NULL in the
certificateStatus table when given a nil IssuerID, which matches the
behavior prior to the StoreIssuerInfo flag (when the IssuerID was
always nil, and cert status was tracked by full cert DER instead).

However, with the switch to proto3, the SA now interprets a nil
IssuerID as a 0, and stores that value in the table instead. The
ocsp-updater code which consumes rows of the certificateStatus table
is not able to properly handle IssuerIDs of 0, leading to fun times.

This change ensures that the orphan handling code also sets the
IssuerID when asking the SA to create a new certificateStatus row,
so we should stop producing new rows with a 0 IssuerID.

Run Details

13268 of 20240 relevant lines covered (65.55%)

0.73 hits per line

letsencrypt / boulder / 12961 / 7
66%
master: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 12961.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 12961 / 7 66% master: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 12961.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 12961 / 7
66%
master: 66%

README BADGES
x