All pull requests

Pull requests

• mtpublisher: Submit to and get cosignatures from the mirrors in cosigners.json

  #9164·beautifulentropy opened Nov 6, 2026Member·

  ·
  2

  2

• Ceremony: refactor key ceremonies to share more code

  #9163·aarongable opened Nov 6, 2026Contributor·3/3·

  ·

• Ceremony: add MTCA ceremony type for creating unsigned MTCA certs

  #9161·aarongable opened Nov 6, 2026Contributor·2/3·

  ·
  1

  2

• Ceremony: add staging-mldsa-keyfile-no-hsm ceremony type

  #9160·aarongable opened Nov 6, 2026Contributor·1/3·

  ·

• Stop requiring RFC6962 logs

  #9159·mcpherrinm opened Nov 6, 2026Contributor·

  ·
  2

• wfe: allow ML-DSA-44 account keys

  #9156·jsha opened Nov 5, 2026Contributor·2/2·

  ·

• mtca: calculate covering subtrees and store in DB.

  #9153·ezekiel opened Nov 4, 2026Member·

  ·
  1

  26

  

• ra/sa: render the attempted challenge as "processing"

  #9096·bhaskargurram-ai opened Oct 11, 2026·

  ·
  1

  9

• mtca/mtpub: add metrics

  #9084·ezekiel opened Oct 2, 2026Member·

  ·
  1

  

• build(deps): bump the aws group across 1 directory with 4 updates

  dependenciesgo
  #9069·dependabot[bot] opened Sep 30, 2026Bot·

  ·

• Differentiate errors when the DNS resolver is unreachable versus a DNS error during validation

  #9019·mcpherrinm opened Sep 11, 2026Contributor·

  ·
  1

• va: Match CAA parameter tags case insensitively

  #8975·hablutzel1 opened Aug 24, 2026Contributor·

  ·
  3

• Reland "Replace log package with fully slog-based system"

  blocked
  #8854·aarongable opened Jul 6, 2026Contributor·

  ·
  1

  9

• Overhaul our github actions for better dep updates & testing

  #8814·aarongable opened Jun 18, 2026Contributor·

  ·

• chore: replace rand.Reader with nil in keygen and signing calls

  #8802·mkhandker19 opened Jun 16, 2026·3 of 5 tasks·

  ·
  1

  18

• Don't ignore unrecognized CAA parameters

  #8620·aarongable opened Feb 4, 2026Contributor·

  ·
  1

• va: normalize caa parameter tags to lowercase

  #8616·1seal opened Feb 2, 2026·

  ·
  1

  3

• ci: use dynamic repository owner for container images

  #8548·sheurich opened Jan 8, 2026Contributor·

  ·
  2

• WIP - Observability stack

  #8535·mcpherrinm opened Dec 24, 2025Contributor·1 of 4 tasks·

  ·

• Log whether DNS queries were DNSSEC-validated

  #8459·aarongable opened Oct 24, 2025Contributor·

  ·
  1

  3

• Reland "Use GetRevocationStatus instead of GetCertificateStatus"

  #8428·aarongable opened Oct 2, 2025Contributor·

  ·
  1

• Add AlreadyRevoked handling to revokedCertificates table inserts

  #8408·aarongable opened Sep 24, 2025Contributor·

  ·
  11

• Check via zlint if a domain's TLD is valid

  #7943·mcpherrinm opened Jan 13, 2025Contributor·

  ·
  4