Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | moved extended key usage to log parameters | Rasmus Dahlberg | 2020-11-04 | 1 | -1/+1 |
| | |||||
* | allowed configuration of max-range and max-chain | Rasmus Dahlberg | 2020-11-04 | 1 | -2/+2 |
| | |||||
* | added certificate chain length checking | Rasmus Dahlberg | 2020-11-04 | 1 | -5/+8 |
| | |||||
* | added chain processing with intermediate certificates | Rasmus Dahlberg | 2020-11-03 | 1 | -1/+2 |
| | | | | | Basic test chains can be generated manually with openssl, see details in server/testdata/x509/README.md. | ||||
* | moved x509 chain loading to stfe package | Rasmus Dahlberg | 2020-11-03 | 1 | -0/+31 |
| | |||||
* | unified ed25519 signing key loading and parsing | Rasmus Dahlberg | 2020-11-03 | 1 | -8/+11 |
| | |||||
* | added start on stfe client | Rasmus Dahlberg | 2020-11-02 | 1 | -3/+3 |
| | | | | | | ChecksumV1 entries can be submitted using client-side ed25519 signatures. The resulting SignedDebugInfoV1 is then verified using the log's announced signature scheme and public key (currently only ed25519). | ||||
* | removed unused code | Rasmus Dahlberg | 2020-10-30 | 1 | -35/+0 |
| | |||||
* | refactor types and documentation | Rasmus Dahlberg | 2020-10-30 | 1 | -11/+9 |
| | | | | | | Structured files a bit better, added more documentation, switched to pointers as default (unless specifically motivated not to do so), and encapsulated TLS (un)marshaling for the respective types that use it. | ||||
* | started refactoring add-entry code path according to doc | Rasmus Dahlberg | 2020-10-30 | 1 | -0/+68 |
| | |||||
* | go fmt | Rasmus Dahlberg | 2020-10-28 | 1 | -4/+2 |
| | |||||
* | added signed tree head and get-sth code path | Rasmus Dahlberg | 2020-10-28 | 1 | -0/+16 |
| | |||||
* | added ed25519 signing and SDIs | Rasmus Dahlberg | 2020-10-27 | 1 | -0/+45 |
| | |||||
* | isolated chain and signature verification | Rasmus Dahlberg | 2020-10-27 | 1 | -0/+35 |
| | |||||
* | decoupled log instance and info | Rasmus Dahlberg | 2020-10-27 | 1 | -0/+43 |
Makes things a bit more modular. As part of this process I also replaced ct/x509 with crypto/x509, which already suits our needs. |