Files
labca/patches/sfe_overrides.patch
2025-12-27 16:40:48 +01:00

39 lines
1.4 KiB
Diff

diff --git a/sfe/overrides.go b/sfe/overrides.go
index fd7589e60..abbbb8e1b 100644
--- a/sfe/overrides.go
+++ b/sfe/overrides.go
@@ -15,6 +15,7 @@ import (
emailpb "github.com/letsencrypt/boulder/email/proto"
berrors "github.com/letsencrypt/boulder/errors"
"github.com/letsencrypt/boulder/iana"
+ "github.com/letsencrypt/boulder/identifier"
"github.com/letsencrypt/boulder/policy"
rl "github.com/letsencrypt/boulder/ratelimits"
"github.com/letsencrypt/boulder/sfe/forms"
@@ -347,7 +348,11 @@ func validateOverrideRequestField(fieldName, fieldValue, rateLimit string) error
return nil
case emailAddressFieldName:
- err := policy.ValidEmail(fieldValue)
+ pa, err := policy.New(map[identifier.IdentifierType]bool{"dns": true}, nil, nil)
+ if err != nil {
+ return fmt.Errorf("cannot create policy authority implementation for email")
+ }
+ err = pa.ValidEmail(fieldValue)
if err == nil {
return nil
}
@@ -373,7 +378,11 @@ func validateOverrideRequestField(fieldName, fieldValue, rateLimit string) error
return fmt.Errorf("IP address is invalid")
case RegisteredDomainFieldName:
- err := policy.ValidDomain(fieldValue)
+ pa, err := policy.New(map[identifier.IdentifierType]bool{"dns": true}, nil, nil)
+ if err != nil {
+ return fmt.Errorf("cannot create policy authority implementation")
+ }
+ err = pa.ValidDomain(fieldValue)
if err != nil {
return fmt.Errorf("registered domain name is invalid")
}