Skip to content

WFE: Normalize SANs in NewOrder request#7554

Merged
pgporada merged 8 commits into
mainfrom
wfe-normalize-neworder-sans
Jun 20, 2024
Merged

WFE: Normalize SANs in NewOrder request#7554
pgporada merged 8 commits into
mainfrom
wfe-normalize-neworder-sans

Conversation

@pgporada

@pgporada pgporada commented Jun 20, 2024

Copy link
Copy Markdown
Member

In #7530, wfe.NewOrder began constructing a rate limit transaction with a precondition that all names must be lower-cased, however the actual implementation of the precondition was accidentally overlooked. This fix corrects that and adds a unit test to prevent a future regression.

Other changes:

  • Only normalized names count towards max names limit
  • Only normalized names will be logged in the web.RequestEvent

@pgporada pgporada requested a review from a team as a code owner June 20, 2024 15:22
Comment thread wfe2/wfe_test.go Outdated
Comment thread wfe2/wfe.go Outdated
pgporada and others added 2 commits June 20, 2024 11:25
Co-authored-by: Samantha Frank <hello@entropy.cat>
Co-authored-by: Samantha Frank <hello@entropy.cat>
@beautifulentropy beautifulentropy changed the title wfe: Normalize SANs in NewOrder request WFE: Normalize SANs in NewOrder request Jun 20, 2024
aarongable
aarongable previously approved these changes Jun 20, 2024
Comment thread wfe2/wfe.go Outdated
Comment thread wfe2/wfe_test.go Outdated
Comment thread wfe2/wfe.go Outdated
Comment thread wfe2/wfe_test.go Outdated
@aarongable aarongable mentioned this pull request Jun 20, 2024
3 tasks
Comment thread wfe2/wfe.go Outdated
@pgporada pgporada merged commit e3eb37f into main Jun 20, 2024
@pgporada pgporada deleted the wfe-normalize-neworder-sans branch June 20, 2024 16:28
pgporada added a commit that referenced this pull request Jun 20, 2024
In #7530, `wfe.NewOrder` [began constructing a rate limit
transaction](https://github.com/letsencrypt/boulder/pull/7530/files#diff-3f950e720c205ce9fa8dea12c6fd7fd44272c2671f19d0e06962abfbea00d491R2340-R2344)
with a precondition that all names must be lower-cased, however the
actual implementation of the precondition was accidentally overlooked.
This fix corrects that and adds a unit test to prevent a future
regression.

Other changes:
- Only normalized names count towards max names limit
- Only normalized names will be logged in the web.RequestEvent

---------

Co-authored-by: Samantha Frank <hello@entropy.cat>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants