From 25de8d341d8d0b9809072147411490a8c9a0d1a1 Mon Sep 17 00:00:00 2001
From: Anton Mosich <anton@mosich.at>
Date: Thu, 17 Apr 2025 23:53:08 +0200
Subject: [PATCH 1/2] boulder: 2024-07-16 -> 2025-04-17

Also deactivate tests that are failing
---
 pkgs/by-name/bo/boulder/package.nix | 26 +++++++++++++++++++++-----
 1 file changed, 21 insertions(+), 5 deletions(-)

diff --git a/pkgs/by-name/bo/boulder/package.nix b/pkgs/by-name/bo/boulder/package.nix
index 8d0b80f0d68e..dc9a8d7c5c6c 100644
--- a/pkgs/by-name/bo/boulder/package.nix
+++ b/pkgs/by-name/bo/boulder/package.nix
@@ -8,12 +8,12 @@
 
 buildGoModule rec {
   pname = "boulder";
-  version = "2024-07-16";
+  version = "2025-04-17";
 
   src = fetchFromGitHub {
     owner = "letsencrypt";
     repo = "boulder";
-    rev = "release-${version}";
+    tag = "release-${version}";
     leaveDotGit = true;
     postFetch = ''
       pushd $out
@@ -21,7 +21,7 @@ buildGoModule rec {
       find $out -name .git -print0 | xargs -0 rm -rf
       popd
     '';
-    hash = "sha256-mIUT9qVBPWrL0ySORwgEH6azaQmzMCl7ha/eYRtvAg4=";
+    hash = "sha256-FXk+JZJ1azpgN6IQ9aYmpUEO1CGs9/3sog1NjrfB4d8=";
   };
 
   vendorHash = null;
@@ -58,6 +58,7 @@ buildGoModule rec {
     "TestAddPrecertificateKeyHash"
     "TestAddPrecertificateNoOCSP"
     "TestAddRegistration"
+    "TestAddReplacementOrder"
     "TestAddSerial"
     "TestAdministrativelyRevokeCertificate"
     "TestAuthorization500"
@@ -81,6 +82,7 @@ buildGoModule rec {
     "TestCheckCertReturnsDNSNames"
     "TestCheckExactCertificateLimit"
     "TestCheckFQDNSetRateLimitOverride"
+    "TestCheckIdentifiersPaused"
     "TestCheckWildcardCert"
     "TestCheckWildcardCert"
     "TestClientTransportCredentials"
@@ -99,6 +101,7 @@ buildGoModule rec {
     "TestDeactivateAuthorization"
     "TestDeactivateRegistration"
     "TestDedupOnRegistration"
+    "TestDialerTimeout"
     "TestDirectory"
     "TestDontFindRevokedCert"
     "TestEarlyOrderRateLimiting"
@@ -106,9 +109,11 @@ buildGoModule rec {
     "TestEnforceJWSAuthType"
     "TestExactPublicSuffixCertLimit"
     "TestExtractJWK"
+    "TestFQDNSetExists"
     "TestFQDNSetTimestampsForWindow"
     "TestFQDNSets"
     "TestFQDNSetsExists"
+    "TestFQDNSetsExists"
     "TestFailExit"
     "TestFasterGetOrderForNames"
     "TestFinalizeAuthorization2"
@@ -116,6 +121,7 @@ buildGoModule rec {
     "TestFinalizeOrderWildcard"
     "TestFinalizeOrderWithMixedSANAndCN"
     "TestFinalizeSCTError"
+    "TestFinalizeWithMustStaple"
     "TestFindCertsAtCapacity"
     "TestFindExpiringCertificates"
     "TestFindIDs"
@@ -145,6 +151,8 @@ buildGoModule rec {
     "TestGetOrder"
     "TestGetOrderExpired"
     "TestGetOrderForNames"
+    "TestGetPausedIdentifiers"
+    "TestGetPausedIdentifiersOnlyUnpausesOneAccount"
     "TestGetPendingAuthorization2"
     "TestGetRevokedCerts"
     "TestGetSerialMetadata"
@@ -221,12 +229,15 @@ buildGoModule rec {
     "TestPOST404"
     "TestPanicStackTrace"
     "TestParseJWSRequest"
+    "TestPauseIdentifiers"
     "TestPendingAuthorizationsUnlimited"
     "TestPerformValidationAlreadyValid"
     "TestPerformValidationBadChallengeType"
     "TestPerformValidationExpired"
     "TestPerformValidationSuccess"
     "TestPerformValidationVAError"
+    "TestPerformValidation_FailedThenSuccessfulValidationResetsPauseIdentifiersRatelimit"
+    "TestPerformValidation_FailedValidationsTriggerPauseIdentifiersRatelimit"
     "TestPrepAuthzForDisplay"
     "TestPreresolvedDialerTimeout"
     "TestProcessCerts"
@@ -242,6 +253,7 @@ buildGoModule rec {
     "TestRegistrationsPerIPOverrideUsage"
     "TestRehydrateHostPort"
     "TestRelativeDirectory"
+    "TestReplacementOrderExists"
     "TestReplicationLagRetries"
     "TestResolveContacts"
     "TestRevokeCertByApplicant_Controller"
@@ -260,6 +272,7 @@ buildGoModule rec {
     "TestSerialsFromPrivateKey"
     "TestSetAndGet"
     "TestSetOrderProcessing"
+    "TestSetReplacementOrderFinalized"
     "TestSingleton"
     "TestStart"
     "TestStatusForOrder"
@@ -268,6 +281,7 @@ buildGoModule rec {
     "TestTLSALPN01DialTimeout"
     "TestTLSConfigLoad"
     "TestTimeouts"
+    "TestUnpauseAccount"
     "TestUpdateCRLShard"
     "TestUpdateChallengeFinalizedAuthz"
     "TestUpdateChallengeRAError"
@@ -275,6 +289,8 @@ buildGoModule rec {
     "TestUpdateMissingAuthorization"
     "TestUpdateNowWithAllFailingSRV"
     "TestUpdateNowWithOneFailingSRV"
+    "TestUpdateRegistrationContact"
+    "TestUpdateRegistrationKey"
     "TestUpdateRegistrationSame"
     "TestUpdateRevokedCertificate"
     "TestValidJWSForKey"
@@ -307,7 +323,7 @@ buildGoModule rec {
     inherit version;
   };
 
-  meta = with lib; {
+  meta = {
     homepage = "https://github.com/letsencrypt/boulder";
     description = "ACME-based certificate authority, written in Go";
     longDescription = ''
@@ -317,7 +333,7 @@ buildGoModule rec {
       revoke certificates for their domains. Boulder is the software that runs
       Let's Encrypt.
     '';
-    license = licenses.mpl20;
+    license = lib.licenses.mpl20;
     mainProgram = "boulder";
     maintainers = [ ];
   };

From 47f169231caaaa0e72b0ff12d56e7d734e51bdfe Mon Sep 17 00:00:00 2001
From: Anton Mosich <anton@mosich.at>
Date: Thu, 17 Apr 2025 23:54:42 +0200
Subject: [PATCH 2/2] boulder: add updateScript

---
 pkgs/by-name/bo/boulder/package.nix | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/pkgs/by-name/bo/boulder/package.nix b/pkgs/by-name/bo/boulder/package.nix
index dc9a8d7c5c6c..bf412476d179 100644
--- a/pkgs/by-name/bo/boulder/package.nix
+++ b/pkgs/by-name/bo/boulder/package.nix
@@ -4,6 +4,7 @@
   buildGoModule,
   testers,
   boulder,
+  nix-update-script,
 }:
 
 buildGoModule rec {
@@ -318,9 +319,12 @@ buildGoModule rec {
     done
   '';
 
-  passthru.tests.version = testers.testVersion {
-    package = boulder;
-    inherit version;
+  passthru = {
+    tests.version = testers.testVersion {
+      package = boulder;
+      inherit version;
+    };
+    updateScript = nix-update-script { };
   };
 
   meta = {