Check that profile matching defaultCertificateProfileName actually ex…

…ists at startup
letsencrypt · Feb 23, 2024 · b2f86f1 · b2f86f1
1 parent fe36be7
commit b2f86f1
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/cmd/boulder-ca/main.go b/cmd/boulder-ca/main.go
@@ -232,9 +232,12 @@ func main() {
 		certProfiles = append(certProfiles, profile)
 	}
 
+	var defaultNameCheck []*issuance.Profile
+	defaultNameCheck = append(defaultNameCheck, deprecatedProfile)
+	defaultNameCheck = append(defaultNameCheck, certProfiles...)
 	var defaultProfileExists bool
-	for index := range certProfiles {
-		if c.CA.Issuance.DefaultCertificateProfileName == certProfiles[index].Name {
+	for index := range defaultNameCheck {
+		if c.CA.Issuance.DefaultCertificateProfileName == defaultNameCheck[index].Name {
 			defaultProfileExists = true
 			break
 		}

diff --git a/test/config-next/ca.json b/test/config-next/ca.json
@@ -44,6 +44,7 @@
 		"issuance": {
 			"defaultCertificateProfileName": "defaultBoulderCertificateProfile",
 			"profile": {
+				"name": "defaultBoulderCertificateProfile",
 				"allowMustStaple": true,
 				"allowCTPoison": true,
 				"allowSCTList": true,