Skip to content

Add support for requesting Certificate Transparency to clients #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 22 commits into
base: steve-sct
Choose a base branch
from
Open

Add support for requesting Certificate Transparency to clients #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
1605f9f
Add CT poison handlers - patch provided by Dr Stephen N Henson.
Aug 28, 2015
d125970
Fix memory leak when **pp is NULL.
Aug 28, 2015
e394459
Change header to include headers for referenced types.
Aug 28, 2015
f98daf4
Add JSON parsing code in prep for use by CTLOG file format.
Aug 28, 2015
d2f5af3
Add CTLOG_STORE code.
Aug 28, 2015
7ab7625
Add extra fields to track validation status, log and source to SCTs.
Aug 28, 2015
ecd8a91
Add method to set issuer public key in the SCT CTX.
Aug 28, 2015
cfd9265
Add utility functions for parsing, writing lists of SCTs in various f…
Aug 28, 2015
a5c9231
Add policy and ability to evaluate a list of SCTs and context against…
Aug 28, 2015
7f42972
Fix clang compiler warning on Mac OS X where %ld is used for uint64_t.
aeijdenberg Aug 5, 2015
01b9f84
Update SCT printing to include new fields.
Aug 28, 2015
473d3f8
Fix BIO_get_accept_socket so that "port-only" input works on FreeBSD.
Aug 4, 2015
054d40f
Added reencode method needed later.
Aug 28, 2015
aeca6c5
Add methods to SSL and SSL_CTX to apply policy, and evaluate it.
Aug 28, 2015
82ec3db
Add "ct" tool.
Aug 28, 2015
affbb26
Add options to "ca" tool for generating pre-certs and accepting SCTs.
Aug 28, 2015
3c40e7a
Add ability to serve SCTs in OCSP response.
Aug 28, 2015
efebeb0
Add ability to request/require CT to s_client.
Aug 28, 2015
b4b6284
Basic smoketest for ssltest options.
Aug 28, 2015
d9a1fd4
Added full integrations tests.
Aug 28, 2015
efb52af
Added README.md.
Aug 28, 2015
2064502
Print correct name for extension when debugging extensions.
Aug 28, 2015
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
389 changes: 228 additions & 161 deletions apps/Makefile
View file
Open in desktop

Large diffs are not rendered by default.

6 changes: 6 additions & 0 deletions apps/apps.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -131,6 +131,8 @@
# include <signal.h>
# endif

# include "crypto/ct/ct_locl.h"

# if defined(OPENSSL_SYS_WIN32) || defined(OPENSSL_SYS_WINCE)
# define openssl_fdset(a,b) FD_SET((unsigned int)a, b)
# else
Expand Down Expand Up @@ -441,6 +443,10 @@ STACK_OF(X509_CRL) *load_crls(const char *file, int format,
X509_STORE *setup_verify(char *CAfile, char *CApath);
int ctx_set_verify_locations(SSL_CTX *ctx,
const char *CAfile, const char *CApath);

STACK_OF(SCT) *load_scts(char *in_path, int in_form);
int precert_strip_poison(X509 *cert);

# ifdef OPENSSL_NO_ENGINE
# define setup_engine(engine, debug) NULL
# else
Expand Down
260 changes: 185 additions & 75 deletions apps/ca.c
View file
Open in desktop

Large diffs are not rendered by default.

Loading