7
66%
master: 66%

Ran 10 Nov 2020 05:26PM UTC

Files 114

Run time 25s

Badge

Embed ▾

Committed 10 Nov 2020 05:21PM UTC coverage: 65.299% (+0.04%) from 65.256%

Job # RUN="coverage" CONTAINER="netaccess"

Build Type

push

travis-pro

Committed by

web-flow

Commit Message

Add multi-issuer support to ocsp-responder (#5154)

The ocsp-responder takes a path to a certificate file as one of
its config values. It uses this path as one of the inputs when
constructing its DBSource, the object responsible for querying
the database for pregenerated OCSP responses to fulfill requests.

However, this certificate file is not necessary to query the
database; rather, it only acts as a filter: OCSP requests whose
IssuerKeyHash do not match the hash of the loaded certificate are
rejected outright, without querying the DB. In addition, there is
currently only support for a single certificate file in the config.

This change adds support for multiple issuer certificate files in
the config, and refactors the pre-database filtering of bad OCSP
requests into a helper object dedicated solely to that purpose.

Fixes #5119

Run Details

13287 of 20348 relevant lines covered (65.3%)

0.73 hits per line

letsencrypt / boulder / 13181 / 7
66%
master: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 13181.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 13181 / 7 66% master: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 13181.7 (RUN="coverage" CONTAINER="netaccess")

letsencrypt / boulder / 13181 / 7
66%
master: 66%

README BADGES
x