Early version of CT Logs query

cashapp / certifikit

Kotlin Certificate processing library.

https://cashapp.github.io/certifikit/

Apache License 2.0

40 stars 11 forks source link

Early version of CT Logs query #86

Closed yschimke closed 3 years ago

yschimke commented 3 years ago

TODO

fact check more things, e.g. show a tree to a CA root.
Show most relevant output

Signed-off-by: Yuri Schimke yuri@schimke.ee

yschimke commented 3 years ago

Example output as is

Key Usage: DigitalSignature, KeyCertSign, CRLSign
Valid:  2015-05-26T00:00:00Z..2038-01-17T00:00:00Z (17 years)
CA: true

OCSP status: GOOD

Certificate Issuers:
C=US, O=Amazon, OU=Server CA 1B, CN=Amazon
    httpbin.org 2022-01-19T23:59:59Z
    httpbin.org 2022-01-19T23:59:59Z
    httpbin.org 2021-02-18T12:00:00Z
    httpbin.org 2021-02-18T12:00:00Z

yschimke commented 3 years ago

Closing this approach, but leaving https://github.com/cashapp/certifikit/issues/85 open.

It's too slow using crt.sh as an API. Don't want to involve signing up for an alternative API. So probably need to look at querying google or facebook APIs.