Avoid duplicate alerts for same certificates or renewals

SSLMate / certspotter

Certificate Transparency Log Monitor

https://sslmate.com/certspotter

Mozilla Public License 2.0

955 stars 83 forks source link

Avoid duplicate alerts for same certificates or renewals #26

Open oskar456 opened 6 years ago

oskar456 commented 6 years ago

To avoid unnecessary noise, it would be nice if there were options:

not to report a certificate that has been already reported in some different log
not to report a certificate sharing public key with an already reported certificate (targeted mostly for renewals without rekeying)

Thanks for this great peace of software!

AGWA commented 6 years ago

Cert Spotter already suppresses notifications for duplicate certificates, as long as you don't specify the -no_save option.

The second suggestion is a good one.

AGWA commented 6 years ago

One caveat: Cert Spotter considers the pre-certificate and final certificate to be different, so you may get up to two alerts for a single issuance. It would be good to deduplicate those alerts too.

certrik commented 3 months ago

Is Cert Spotter already suppresses notifications for duplicate certificates, as long as you don't specify the -no_save option. documented anywhere? Because I ran in to this and didn't find any docu. Maybe it is just hidden well.

AGWA commented 3 months ago

@certrik what information would have been helpful? That turning on -no_save causes duplicate notifications to be sent?

certrik commented 3 months ago

Yes. That is an interesting information.