From 9b38f5a034486c27eaf81062ecdd86a72667e2b0 Mon Sep 17 00:00:00 2001 From: Rasmus Dahlberg Date: Fri, 23 Oct 2020 18:01:10 +0200 Subject: added basic trust-anchor code path Pretty much the bare minimum to load trust anchors from file and check that the submitter's certificate chains back to something valid. --- instance.go | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) (limited to 'instance.go') diff --git a/instance.go b/instance.go index 5fa1b6c..3f53e5f 100644 --- a/instance.go +++ b/instance.go @@ -8,6 +8,7 @@ import ( "github.com/golang/glog" "github.com/google/trillian" + "github.com/google/certificate-transparency-go/trillian/ctfe" ctutil "github.com/google/certificate-transparency-go/trillian/util" ) @@ -17,17 +18,19 @@ type instance struct { logID int64 client trillian.TrillianLogClient deadline time.Duration + anchors ctfe.CertValidationOpts timesource ctutil.TimeSource } // NewInstance returns a new STFE instance -func NewInstance(prefix string, id int64, client trillian.TrillianLogClient, deadline time.Duration, timesource ctutil.TimeSource) *instance { +func NewInstance(prefix string, id int64, client trillian.TrillianLogClient, deadline time.Duration, timesource ctutil.TimeSource, anchors ctfe.CertValidationOpts) *instance { return &instance{ prefix: prefix, logID: id, client: client, deadline: deadline, timesource: timesource, + anchors: anchors, } } -- cgit v1.2.3