Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | renamed x509.go to verify.go | Rasmus Dahlberg | 2020-11-05 | 1 | -79/+0 |
| | |||||
* | moved publlic x509 helpers into a separate package | Rasmus Dahlberg | 2020-11-05 | 1 | -127/+3 |
| | |||||
* | refactored signing/verification parts that are log specific | Rasmus Dahlberg | 2020-11-05 | 1 | -27/+28 |
| | | | | These methods are now private and attached to LogParameters. | ||||
* | moved sth and sdi metrics into the signer component | Rasmus Dahlberg | 2020-11-05 | 1 | -9/+10 |
| | |||||
* | simplified encoding and decoding | Rasmus Dahlberg | 2020-11-05 | 1 | -10/+5 |
| | | | | | Go's "encoding/json" already takes care of encoding and decoding byte slices as base64. As such, it need not be done explicitly by us. | ||||
* | moved extended key usage to log parameters | Rasmus Dahlberg | 2020-11-04 | 1 | -1/+1 |
| | |||||
* | allowed configuration of max-range and max-chain | Rasmus Dahlberg | 2020-11-04 | 1 | -2/+2 |
| | |||||
* | added certificate chain length checking | Rasmus Dahlberg | 2020-11-04 | 1 | -5/+8 |
| | |||||
* | added chain processing with intermediate certificates | Rasmus Dahlberg | 2020-11-03 | 1 | -1/+2 |
| | | | | | Basic test chains can be generated manually with openssl, see details in server/testdata/x509/README.md. | ||||
* | moved x509 chain loading to stfe package | Rasmus Dahlberg | 2020-11-03 | 1 | -0/+31 |
| | |||||
* | unified ed25519 signing key loading and parsing | Rasmus Dahlberg | 2020-11-03 | 1 | -8/+11 |
| | |||||
* | added start on stfe client | Rasmus Dahlberg | 2020-11-02 | 1 | -3/+3 |
| | | | | | | ChecksumV1 entries can be submitted using client-side ed25519 signatures. The resulting SignedDebugInfoV1 is then verified using the log's announced signature scheme and public key (currently only ed25519). | ||||
* | removed unused code | Rasmus Dahlberg | 2020-10-30 | 1 | -35/+0 |
| | |||||
* | refactor types and documentation | Rasmus Dahlberg | 2020-10-30 | 1 | -11/+9 |
| | | | | | | Structured files a bit better, added more documentation, switched to pointers as default (unless specifically motivated not to do so), and encapsulated TLS (un)marshaling for the respective types that use it. | ||||
* | started refactoring add-entry code path according to doc | Rasmus Dahlberg | 2020-10-30 | 1 | -0/+68 |
| | |||||
* | go fmt | Rasmus Dahlberg | 2020-10-28 | 1 | -4/+2 |
| | |||||
* | added signed tree head and get-sth code path | Rasmus Dahlberg | 2020-10-28 | 1 | -0/+16 |
| | |||||
* | added ed25519 signing and SDIs | Rasmus Dahlberg | 2020-10-27 | 1 | -0/+45 |
| | |||||
* | isolated chain and signature verification | Rasmus Dahlberg | 2020-10-27 | 1 | -0/+35 |
| | |||||
* | decoupled log instance and info | Rasmus Dahlberg | 2020-10-27 | 1 | -0/+43 |
Makes things a bit more modular. As part of this process I also replaced ct/x509 with crypto/x509, which already suits our needs. |