neil
efecf2a308
Pebble reuses a valid authorization in a new order 50% of the time by default, so the dns manual mode case was a coin flip: a reused authorization left nothing for the TXT record to answer.
80 lines
2.5 KiB
YAML
80 lines
2.5 KiB
YAML
name: PebbleStrict
|
|
on:
|
|
push:
|
|
branches:
|
|
- '*'
|
|
paths:
|
|
- '*.sh'
|
|
- '.github/workflows/PebbleStrict.yml'
|
|
pull_request:
|
|
branches:
|
|
- dev
|
|
paths:
|
|
- '*.sh'
|
|
- '.github/workflows/PebbleStrict.yml'
|
|
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
|
|
|
|
jobs:
|
|
PebbleStrict:
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
TestingDomain: example.com
|
|
TestingAltDomains: www.example.com
|
|
TEST_ACME_Server: https://localhost:14000/dir
|
|
HTTPS_INSECURE: 1
|
|
Le_HTTPPort: 5002
|
|
TEST_LOCAL: 1
|
|
TEST_CA: "Pebble Intermediate CA"
|
|
TEST_DNS_MANUAL: 1
|
|
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- name: Install tools
|
|
run: sudo apt-get install -y socat
|
|
- name: Run Pebble
|
|
run: |
|
|
cd ..
|
|
curl https://raw.githubusercontent.com/letsencrypt/pebble/master/docker-compose.yml >docker-compose.yml
|
|
# Pebble reuses a valid authorization in a new order 50% of the time
|
|
# by default, which makes the dns manual mode case a coin flip: a
|
|
# reused authorization leaves nothing for the TXT record to answer.
|
|
printf 'services:\n pebble:\n environment:\n PEBBLE_AUTHZREUSE: "0"\n' >docker-compose.override.yml
|
|
docker compose up -d
|
|
- name: Set up Pebble
|
|
run: curl --request POST --data '{"ip":"10.30.50.1"}' http://localhost:8055/set-default-ipv4
|
|
- name: Clone acmetest
|
|
run: cd .. && git clone --depth=1 https://github.com/acmesh-official/acmetest.git && cp -r acme.sh acmetest/
|
|
- name: Run acmetest
|
|
run: cd ../acmetest && ./letest.sh
|
|
|
|
PebbleStrict_IPCert:
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
TestingDomain: 1.23.45.67
|
|
TEST_ACME_Server: https://localhost:14000/dir
|
|
HTTPS_INSECURE: 1
|
|
Le_HTTPPort: 5002
|
|
Le_TLSPort: 5001
|
|
TEST_LOCAL: 1
|
|
TEST_CA: "Pebble Intermediate CA"
|
|
TEST_IPCERT: 1
|
|
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
- name: Install tools
|
|
run: sudo apt-get install -y socat
|
|
- name: Run Pebble
|
|
run: |
|
|
docker run --rm -itd --name=pebble \
|
|
-e PEBBLE_VA_ALWAYS_VALID=1 \
|
|
-p 14000:14000 -p 15000:15000 ghcr.io/letsencrypt/pebble:latest -config /test/config/pebble-config.json -strict
|
|
- name: Clone acmetest
|
|
run: cd .. && git clone --depth=1 https://github.com/acmesh-official/acmetest.git && cp -r acme.sh acmetest/
|
|
- name: Run acmetest
|
|
run: cd ../acmetest && ./letest.sh |