letsencrypt/boulder on Hacker News

https://github.com/letsencrypt/boulder You can find a docker-compose.yml file to get some idea. Appears to be using MariaDB. They shut down OCSP responders and expiry email reminders, so there really is no need to have a database apart…

comment by Ayesh · 2025-12-10 · in 10 Years of Let's Encrypt

Related: https://github.com/letsencrypt/boulder/issues/4620

comment by gslin · 2025-08-28 · in Certificates for Onion Services

Just before it's returned to the caller: https://github.com/letsencrypt/boulder/blob/0d7ea60b2cb6fa35...

comment by DivineEntropy · 2025-06-04 · in Scaling the Let's Encrypt rate limits to prepare for a billion active TLS cert

…on localhost it's clear that the security of the internet as a whole is of far greater value. [0] https://github.com/letsencrypt/boulder

comment by jmillikin · 2022-11-03 · in Comparing TCP and QUIC

…be a lot more reasonable for this use-case. Thanks for sharing, I'll definitely check it out! [1]: https://github.com/letsencrypt/boulder

comment by infogulch · 2022-01-06 · in Should you use Let's Encrypt for internal hostnames?

…is open source [1]. Most queries are in the files in the "sa" (storage authority) folder. [1] https://github.com/letsencrypt/boulder/

comment by kilburn · 2021-01-22 · in The database servers powering Let's Encrypt

…instead of proprietary "Let's Encypt ACME" implementations. https://tools.ietf.org/html/rfc8555 https://github.com/letsencrypt/boulder/blob/master/docs/acme... To me this seems like a sensible compromise between backwards compatibility and…

comment by lub · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

For context in terms of what caused this, here's the PR which I assume fixed the bug in question: https://github.com/letsencrypt/boulder/pull/4690 It looks like a nasty and subtle pass-by-reference of a for-range local variable, although…

comment by terom · 2020-03-03 · in Revoking certain certificates on March 4

Stable URL for posterity. https://github.com/letsencrypt/boulder/blob/4184dc3fc997d51e...

comment by throwaway8941 · 2020-02-28 · in Let's Encrypt Has Issued a Billion Certificates

Here's the boulder CA function that generates serials https://github.com/letsencrypt/boulder/blob/master/ca/ca.go#...

comment by GuyPostington · 2020-02-27 · in Let's Encrypt Has Issued a Billion Certificates

…and it might be completely wrong? Regardless this did prompt me to go back and look at what became https://github.com/letsencrypt/boulder/pull/3726 and confirm that yeah, they still don't get it. Must try harder. I thought I did a pretty…

comment by tialaramex · 2020-02-13 · in DNSSEC root key signing ceremony postponed because they can't open a safe

…in my case my network is configured to always reach the in house DNS first, to keep latency low [1] https://github.com/letsencrypt/boulder/blob/8167abd5e3c7a142...

comment by lostjohnny · 2019-05-29 · in I can see your local web servers

…a very complicated key generation which opens lots of opportunities for things to go wrong... ‡ https://github.com/letsencrypt/boulder/pull/3189 Edited to add: The work that eventually led to ROCA is really fascinating. The researchers…

comment by tialaramex · 2018-08-10 · in ROCA vs. ROBOT: An Eternal Golden Braid

…the last week, you can't create any new ones. They plan to change this, but it hasn't happened yet: https://github.com/letsencrypt/boulder/issues/2800 Some organizations have gotten rate limit exceptions to handle this particular issue.…

comment by profmonocle · 2018-08-06 · in Let's Encrypt Root Trusted by All Major Root Programs

Per https://github.com/letsencrypt/boulder/blob/master/bdns/dns.... it seems they round robin. But they are aware of the issue in the spec: https://ietf-wg-acme.github.io/acme/draft-ietf-acme-acme.htm... - “Querying the DNS from multiple…

comment by btown · 2018-04-25 · in Hijack of Amazon’s domain service used to reroute web traffic for two hours

I've been following progress in their GitHub issue for it: https://github.com/letsencrypt/boulder/issues/2244 Most recent comment: > We're working hard on it, but will probably not land this in production before the end of February. Still,…

comment by discreditable · 2018-02-21 · in Let's Encrypt ACMEv2 and Wildcard Launch Delay

…in Pebble[0] (not production ready) and Boulder[1] [0]: https://github.com/letsencrypt/pebble [1]: https://github.com/letsencrypt/boulder

comment by predakanga · 2017-10-25 · in Short-Lived Certificates at Netflix

…server-side implementation right now, and that's Let's Encrypt's open-source Boulder project: https://github.com/letsencrypt/boulder

comment by Ajedi32 · 2017-10-17 · in ACME Support in Apache HTTP Server Project

…code for NSS [7], this bugzilla issue [8], this code [10], and this mailing list thread [11]. [1] https://github.com/letsencrypt/boulder/pull/2748 [2] https://github.com/letsencrypt/boulder/issues/2728 [3]…

comment by niftich · 2017-05-19 · in Let's Encrypt is down

…document the double slash issue). Probably should have used PathUnescape[1] on line 185 though. [0] https://github.com/letsencrypt/boulder/blob/master/vendor/gi... [1] https://golang.org/pkg/net/url/#PathUnescape PS. It does seem like a…

comment by lilei2 · 2017-05-19 · in Let's Encrypt is down

…authorization database instead of relying on HTTP challenges, but HTTP challenges would work too. https://github.com/letsencrypt/boulder

comment by geofft · 2017-04-27 · in Symantec CA Response to Google Proposal and Community Feedback

If you're upset about the expected operation of a service based on open-source software (github.com/letsencrypt/boulder), then I'd strongly recommend reading the code before use. Additionally: "I also expect that our Enigma Bridge Cloud…

comment by packetized · 2016-10-26 · in Let's Encrypt AUTHZ Reuse and Eternal Account Key

It was more of an ops issue (lack of IPv6 connectivity at the DC) rather than a software issue: https://github.com/letsencrypt/boulder/issues/593

comment by spacehunt · 2016-07-26 · in Let's Encrypt now fully supports IPv6

According to conversation on https://github.com/letsencrypt/boulder/issues/593 they couldn't support it because one of their datacenters didn't support IPv6 traffic.

comment by sp332 · 2016-07-26 · in Let's Encrypt now fully supports IPv6

IPv6 support has recently been completed in Boulder (the LE CA software) already: https://github.com/letsencrypt/boulder/issues/593 That was the main blocking issue. IPv6 in LE is coming very soon.

comment by scrollaway · 2016-05-13 · in Announcing Certbot: EFF's Client for Let's Encrypt

You could use their code/system, if you set up something like: https://github.com/letsencrypt/boulder internally?

comment by e12e · 2016-04-12 · in Leaving Beta, New Sponsors

…trust your internal CA that you can manager, rather than the test one that LetsEncrypt offer. [0] https://github.com/letsencrypt/boulder

comment by vertex-four · 2016-04-12 · in Leaving Beta, New Sponsors

For testing just use a local install of boulder server, https://github.com/letsencrypt/boulder . It is very straightforward to run one especially when using their Docker scripts. That is how I check my setup against letsencrypt during…

comment by _0w8t · 2016-04-12 · in Leaving Beta, New Sponsors

They do! boulder[1], the server software behind Let's Encrypt, is open source. [1]: https://github.com/letsencrypt/boulder

comment by pfg · 2016-04-12 · in Leaving Beta, New Sponsors

…development and testing to avoid premature exposure to the public instance of LetsEncrypt. [1] https://github.com/letsencrypt/boulder

comment by _0w8t · 2016-03-08 · in Watch LetsEncrypt issue its millionth certificate live

…for them in while they were out, and we deleted the code for them entirely the other day (in https://github.com/letsencrypt/boulder/pull/1247 )

comment by jmhodges · 2015-12-13 · in Duplicate Signature Key Selection Attack in Let's Encrypt

…with Let's Encrypt, just my perspective) [1]: https://github.com/letsencrypt/letsencrypt [2]: https://github.com/letsencrypt/boulder [3]: https://blog.cloudflare.com/the-hard-costs-of-heartbleed/

comment by pfg · 2015-12-03 · in Facebook Sponsors Let's Encrypt

Glad you like the project! Contributing to our software is one way to help: https://github.com/letsencrypt/boulder https://github.com/letsencrypt/lets-encrypt-preview Also, if you work for a company that might be interested in sponsoring…

comment by joshmoz · 2015-06-16 · in Let's Encrypt Launch Schedule

…) Also it is verified that the CSR doesn't contain that field in Boulder: https://github.com/letsencrypt/boulder/blob/aa71088c440a63e1... This test is called when you send the CA a CSR: https://github.com/letsencrypt/boulder/blob/08

comment by baby · 2015-06-12 · in Let's Encrypt Overview

…at munging together OpenSSL commands), and you're looking at the developer preview of that. [0] https://github.com/letsencrypt/boulder

comment by vertex-four · 2015-01-16 · in Let's Encrypt Developer Preview