7
66%
master: 66%

Ran 18 Sep 2020 11:15PM UTC

Files 114

Run time 12s

Badge

Embed ▾

Committed 18 Sep 2020 11:10PM UTC coverage: 65.256% (+0.01%) from 65.244%

Job # RUN="coverage" CONTAINER="netaccess"

Build Type

push

travis-pro

Committed by

web-flow

Commit Message

CA: Verify digitalSignature and certSign key usages (#5091)

When the CA loads new issuers (both their certificates and their
private keys), it performs a variety of sanity checks, such as
ensuring that the profile's signature algorithm matches the key
type.

With this change, we also check that the issuer's certificate has
the appropriate key usage bits set:
`certSign`, if it is going to be issuing end-entity certs; and
`digitalSignature`, because it will be signing OCSP responses for
previously-issued certificates.

Fixes #5068

Run Details

13262 of 20323 relevant lines covered (65.26%)

0.73 hits per line

letsencrypt / boulder / 12991 / 7
66%
master: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 12991.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 12991 / 7 66% master: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 12991.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 12991 / 7
66%
master: 66%

README BADGES
x