Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use URL + Public key as cache key in Boulder Publisher #7892

Closed
mcpherrinm opened this issue Dec 16, 2024 · 0 comments · Fixed by #7893
Closed

Use URL + Public key as cache key in Boulder Publisher #7892

mcpherrinm opened this issue Dec 16, 2024 · 0 comments · Fixed by #7893
Assignees

Comments

@mcpherrinm
Copy link
Contributor

Summary:
Publisher caches logs based on pubkey only, not pubkey and URL.

c.logs[b64PK] = log

Steps to reproduce:

  1. Submit a certificate for SCTs
  2. Change URL of a log, and reload boulder-ra with the new configuration.
  3. Submit another certificate

Expected result:
Publisher should succeed at submitting to the new URL

Actual result:
Publisher uses a cached log client with the wrong URL

Additional details:
In our non-production environments, we use Boulder's ct-test-srv. If we redeploy ct-test-srv without restarting the Publisher, submissions fail. We could work around this by giving more static URLs to our test logs, but it would be nicer if Boulder handled this.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants