VA: Check that maxRemoteValidationFailures is non-negative (#7150)

Prevents a panic when the VA config field `maxRemoteValidationFailures` is set to a negative number by adding validation tags Fixes #7149
letsencrypt · Nov 15, 2023 · 104c393 · 104c393
1 parent f57bd30
commit 104c393
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/cmd/boulder-va/main.go b/cmd/boulder-va/main.go
@@ -32,7 +32,7 @@ type Config struct {
 		DNSAllowLoopbackAddresses bool
 
 		RemoteVAs                   []cmd.GRPCClientConfig `validate:"omitempty,dive"`
-		MaxRemoteValidationFailures int
+		MaxRemoteValidationFailures int                    `validate:"omitempty,min=0,required_with=RemoteVAs"`
 
 		Features map[string]bool