Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Remove deprecated id-qt-cps support from ceremony tool #7726

Closed
pgporada opened this issue Sep 27, 2024 · 0 comments · Fixed by #7750
Closed

Remove deprecated id-qt-cps support from ceremony tool #7726

pgporada opened this issue Sep 27, 2024 · 0 comments · Fixed by #7750
Assignees
@jprenken
Labels
starter Ideal issues for folks getting familiar with Boulder
Milestone
Sprint 2024-10-08

Comments

@pgporada
Copy link
Member

pgporada commented Sep 27, 2024 •
edited
Loading

An upcoming CPS revision removes the optional carve out for setting id-qt-cps in a Subordinate CA (intermediate/cross-signed intermediate). We should prevent the ceremony tool from allowing us to step on this mississuance rake. Previous ceremonies did not set that field fwiw.
@pgporada pgporada added the starter Ideal issues for folks getting familiar with Boulder label Sep 27, 2024
@aarongable aarongable added this to the Sprint 2024-10-01 milestone Oct 1, 2024
jprenken added a commit that referenced this issue Oct 8, 2024
@jprenken
ceremony: Remove deprecated id-qt-cps support
5f1d69b 
Fixes #7726
@jprenken jprenken mentioned this issue Oct 8, 2024
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@jprenken jprenken

Labels
starter Ideal issues for folks getting familiar with Boulder
Projects
None yet
Milestone
Sprint 2024-10-08
Development

Successfully merging a pull request may close this issue.

ceremony: Remove deprecated id-qt-cps support letsencrypt/boulder
3 participants
@pgporada @aarongable @jprenken