search

letsencrypt / boulder

An ACME-based certificate authority, written in Go.
Mozilla Public License 2.0
5.06k stars 593 forks source link

`signatures` method doesn't include CRLs #7532

Closed mcpherrinm closed 3 weeks ago

mcpherrinm commented 3 weeks ago

The signatures metric from CA has purpose for precerts, certificates, and ocsp, but not CRLs.

References:

https://github.com/letsencrypt/boulder/blob/3786401f107be28f550366bc88c4a3bfc99e9a8b/cmd/boulder-ca/main.go#L178-L184 https://github.com/letsencrypt/boulder/blob/3786401f107be28f550366bc88c4a3bfc99e9a8b/ca/ocsp.go#L128 https://github.com/letsencrypt/boulder/blob/3786401f107be28f550366bc88c4a3bfc99e9a8b/ca/ca.go#L446 https://github.com/letsencrypt/boulder/blob/3786401f107be28f550366bc88c4a3bfc99e9a8b/ca/ca.go#L626

There should be an extra call to this metric in ca/crl.go probably