Certificate Transparency logging support

dogtagpki / pki

The Dogtag Certificate System is an enterprise-class Certificate Authority (CA) which supports all aspects of certificate lifecycle management, including key archival, OCSP and smartcard management.

https://www.dogtagpki.org

GNU General Public License v2.0

355 stars 133 forks source link

Certificate Transparency logging support #3107

Open pki-bot opened 3 years ago

pki-bot commented 3 years ago

This issue was migrated from Pagure Issue #2989. Originally filed by ftweedal (@frasertweedale) on 2018-04-13 08:19:43:

Assigned to nobody
Associated bugzillas
- https://bugzilla.redhat.com/show_bug.cgi?id=1596911

This is an umbrella / tracker ticket for CT logging support in Dogtag.

There are a few aspects, which could be broken into different tickets, including:

post-issuance certificate logging and SCT recording
precertificate logging and embedded SCTs
conveying SCTs in OCSP responses

Design doc: http://www.dogtagpki.org/wiki/Certificate_Transparency_logging

pki-bot commented 3 years ago

Comment from mharmsen (@mharmsen) at 2018-04-13 11:15:02

Metadata Update from @mharmsen:

Custom field component adjusted to None
Custom field feature adjusted to None
Custom field origin adjusted to None
Custom field proposedmilestone adjusted to None
Custom field proposedpriority adjusted to None
Custom field reviewer adjusted to None
Custom field type adjusted to None
Custom field version adjusted to None
Issue set to the milestone: 0.0 NEEDS_TRIAGE

pki-bot commented 3 years ago

Comment from mharmsen (@mharmsen) at 2018-06-30 00:50:38

Metadata Update from @mharmsen:

Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1596911