7
66%
master: 66%

Ran 09 Feb 2021 05:35PM UTC

Files 110

Run time 26s

Badge

Embed ▾

Committed 09 Feb 2021 05:09PM UTC coverage: 65.273% (-0.02%) from 65.292%

Job # TESTFLAGS="--coverage" CONTAINER="netaccess"

Build Type

push

travis-pro

Committed by

web-flow

Commit Message

wfe2: Check signatures before serving cert chains (#5273)

Add a check to `wfe2.Certificate` to ensure that the chain we select to
serve with the end-entity cert actually validates the end-entity's
signature. Add new test certificates, generated to match our actual
hierarchy. Update wfe2 tests to use the new test certificates, as well
as new mocks, in order to properly test the new check.

The new test certs and overhauled tests are necessary because the prior
wfe2 tests built and served chains that were not valid, and in
fact could not be valid because they were built with self-signed certs.

Fixes #5225

Run Details

13396 of 20523 relevant lines covered (65.27%)

0.73 hits per line

letsencrypt / boulder / 13374 / 7
66%
master: 66%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 13374.7 (TESTFLAGS="--coverage" CONTAINER="netaccess")

letsencrypt / boulder / 13374 / 7 66% master: 66%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 13374.7 (TESTFLAGS="--coverage" CONTAINER="netaccess")

letsencrypt / boulder / 13374 / 7
66%
master: 66%

README BADGES
x