RA: Use IssuerNameID for revocation OCSP (letsencrypt#5516)

aarongable · web-flow · commit b59f4386f58d · 2021-07-19T13:38:56.000-07:00
Update the RA to specify the IssuerNameID rather than the IssuerID when requesting that the CA generate a new OCSP response for a revoked certificate. Depends on letsencrypt#5515 Part of letsencrypt#5152
diff --git a/ra/ra.go b/ra/ra.go
@@ -1790,7 +1790,7 @@ func (ra *RegistrationAuthorityImpl) revokeCertificate(ctx context.Context, cert
 
 	ocspResponse, err := ra.CA.GenerateOCSP(ctx, &capb.GenerateOCSPRequest{
 		Serial:    serial,
-		IssuerID:  int64(issuer.ID()),
+		IssuerID:  int64(issuer.NameID()),
 		Status:    string(core.OCSPStatusRevoked),
 		Reason:    reason,
 		RevokedAt: revokedAt,
