search

dmariogatto / certificate-transparency

Certificate Transparency ported to C# for .NET
MIT License
6 stars 2 forks source link

issue with CATS unable to validate certificates when google log file is not available #5

Open xhh2yqm opened 1 year ago

xhh2yqm commented 1 year ago

Hi @dmariogatto,

currently my app is blocked from making any http call because CATS can't get the below url to validate the certificate

https://www.gstatic.com/ct/log_list/v2/log_list.json

there is a newer version v3 available that the library can update to. https://www.gstatic.com/ct/log_list/v3/log_list.json

at the time of writing, google took down the v2 document and cause clients to fail. as temp solution, file is back up now but for permanent solution, can the library define both and have interface for clients to select between v2 and v3?

Thanks

roger2hk commented 1 year ago

The v2 log list is now temporarily back to minimise the impact. Please upgrade to v3 log list as soon as possible.

dmariogatto commented 1 year ago

@xhh2yqm Why would you want both v2 & v3?

Discussion for reference Turning down Google's v1, v2 CT log list publishing.