Merge branch 'main' into 7324-add-certprofilename-to-order-protobuf-m…

…essage

.github/workflows/boulder-ci.yml

@@ -36,8 +36,8 @@ jobs:
       matrix:
         # Add additional docker image tags here and all tests will be run with the additional image.
         BOULDER_TOOLS_TAG:
-          - go1.21.5_2024-02-14
-          - go1.22.0_2024-02-14
+          - go1.21.8_2024-03-05
+          - go1.22.1_2024-03-05
         # Tests command definitions. Use the entire "docker compose" command you want to run.
         tests:
           # Run ./test.sh --help for a description of each of the flags.
@@ -104,7 +104,7 @@ jobs:
       # When set to true, GitHub cancels all in-progress jobs if any matrix job fails. Default: true
       fail-fast: false
       matrix:
-        go-version: [ '1.21.5' ]
+        go-version: [ '1.21.8' ]
 
     steps:
       # Checks out your repository under $GITHUB_WORKSPACE, so your job can access it

.github/workflows/release.yml

@@ -15,8 +15,8 @@ jobs:
       fail-fast: false
       matrix:
         GO_VERSION:
-          - "1.21.5"
-          - "1.22.0"
+          - "1.21.8"
+          - "1.22.1"
     runs-on: ubuntu-20.04
     permissions:
       contents: write

.github/workflows/try-release.yml

@@ -15,8 +15,8 @@ jobs:
       fail-fast: false
       matrix:
         GO_VERSION:
-          - "1.21.5"
-          - "1.22.0"
+          - "1.21.8"
+          - "1.22.1"
     runs-on: ubuntu-20.04
     steps:
       - uses: actions/checkout@v4

ca/proto/ca.proto

@@ -13,21 +13,39 @@ service CertificateAuthority {
 }
 
 message IssueCertificateRequest {
+  // Next unused field number: 6
   bytes csr = 1;
   int64 registrationID = 2;
   int64 orderID = 3;
   int64 issuerNameID = 4;
+
+  // certProfileName is a human readable name provided by the RA and used to
+  // determine if the CA can issue for that profile. A default name will be
+  // assigned during *Profile construction if no name is provided.
+  string certProfileName = 5;
 }
 
 message IssuePrecertificateResponse {
+  // Next unused field number: 3
   bytes DER = 1;
+
+  // certProfileHash is a hash over the exported fields of a certificate profile
+  // to ensure that the profile remains unchanged after multiple roundtrips
+  // through the RA and CA.
+  bytes certProfileHash = 2;
 }
 
 message IssueCertificateForPrecertificateRequest {
+  // Next unused field number: 6
   bytes DER = 1;
   repeated bytes SCTs = 2;
   int64 registrationID = 3;
   int64 orderID = 4;
+
+  // certProfileHash is a hash over the exported fields of a certificate profile
+  // to ensure that the profile remains unchanged after multiple roundtrips
+  // through the RA and CA.
+  bytes certProfileHash = 5;
 }
 
 // OCSPGenerator generates OCSP. We separate this out from