Skip to content
Merged
Show file tree
Hide file tree
Changes from 2 commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 3 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,11 +30,10 @@ Boulder is divided into the following main components:
4. Certificate Authority
5. Storage Authority
6. Publisher
7. OCSP Responder
8. CRL Updater
7. CRL Updater

This component model lets us separate the function of the CA by security
context. The Web Front End, Validation Authority, OCSP Responder and
context. The Web Front End, Validation Authority, CRL Storer, and
Publisher need access to the Internet, which puts them at greater risk of
compromise. The Registration Authority can live without Internet
connectivity, but still needs to talk to the Web Front End and Validation
Expand All @@ -50,7 +49,7 @@ lines indicating SA RPCs are not shown here.
| ^
Subscriber server <- VA <----+ |
|
Browser -------------------> OCSP Responder
Browser -----> S3 <----- CRL Storer/Updater
```

Internally, the logic of the system is based around five types of objects:
Expand Down
2 changes: 0 additions & 2 deletions cmd/boulder/main.go
Original file line number Diff line number Diff line change
Expand Up @@ -21,10 +21,8 @@ import (
_ "github.com/letsencrypt/boulder/cmd/email-exporter"
_ "github.com/letsencrypt/boulder/cmd/log-validator"
_ "github.com/letsencrypt/boulder/cmd/nonce-service"
_ "github.com/letsencrypt/boulder/cmd/ocsp-responder"
_ "github.com/letsencrypt/boulder/cmd/remoteva"
_ "github.com/letsencrypt/boulder/cmd/reversed-hostname-checker"
_ "github.com/letsencrypt/boulder/cmd/rocsp-tool"
_ "github.com/letsencrypt/boulder/cmd/sfe"
"github.com/letsencrypt/boulder/core"

Expand Down
3 changes: 1 addition & 2 deletions cmd/crl-updater/main.go
Original file line number Diff line number Diff line change
Expand Up @@ -79,8 +79,7 @@ type Config struct {
// This should be set to the current set of serial prefixes in production.
// When deploying explicit sharding (i.e. the CRLDistributionPoints extension),
// the CAs should be configured with a new set of serial prefixes that haven't
// been used before (and the OCSP Responder config should be updated to
// recognize the new prefixes as well as the old ones).
// been used before.
TemporallyShardedSerialPrefixes []string

// MaxParallelism controls how many workers may be running in parallel.
Expand Down
297 changes: 0 additions & 297 deletions cmd/ocsp-responder/main.go

This file was deleted.

Loading