certcat / crawler

Crawler for the web pki
MIT License
0 stars 0 forks source link

Data source: Mozilla root program and OneCRL #2

Open mcpherrinm opened 1 year ago

mcpherrinm commented 1 year ago

Mozilla runs a root program.

OneCRL has revoked intermediates as an out-of-band mechanism.

Many other systems like Linux distros and programming languages use Mozilla's data, so those downstream consumers may have inconsistent versions. We may want to track them as well, via their ca-certificates packages etc.

mcpherrinm commented 1 year ago

Golang now ships a copy in its x509roots/fallback package, https://pkg.go.dev/golang.org/x/crypto/x509roots/fallback