mozilla / crlite

WebPKI-level Certificate Revocation via Multi-Level Bloom Filter Cascade
http://www.cs.umd.edu/~dml/papers/crlite_oakland17.pdf
Mozilla Public License 2.0
70 stars 8 forks source link

Remove duplicate entries from `intermediates` and check enrollment in signoff #232

Closed jschanck closed 2 years ago

jschanck commented 2 years ago

Resolves #230 - Add enrollment checks to signoff tool Resolves #231 - Remove duplicate entries in intermediates collection

I've also made it so that we download pem attachments inside of load_remote_intermediates rather than while checking expiry dates. There are a few intermediates in the remote settings collection with certificates that python cryptography rejects as malformed. The changes to load_remote_intermediates will cause these entries to be deleted.