blob: ba9028922d3f83ed156c49a9336d80ff4bd3e08f (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
|
package descriptor
import (
"bytes"
"fmt"
"crypto/tls"
"encoding/base64"
)
const (
// Location is an url to a json-encoded list of stfe log operators
Location = "https://github.com/system-transparency/stfe/tree/main/server/descriptor/stfe.json"
)
// Operator is an stfe log operator that runs zero or more logs
type Operator struct {
Name string `json:"name"`
Email string `json:"email"`
Logs []*Log `json:"logs"`
}
// Log is a collection of immutable stfe log parameters
type Log struct {
Id []byte `json:"id"` // H(PublicKey)
PublicKey []byte `json:"public_key"` // DER-encoded SubjectPublicKeyInfo
Scheme tls.SignatureScheme `json:"signature_scheme"` // Signature schemes used by the log (RFC 8446, §4.2.3)
Schemes []tls.SignatureScheme `json:"signature_schemes"` // Signature schemes that submitters can use (RFC 8446, §4.2.3)
MaxChain uint8 `json:"max_chain"` // maximum certificate chain length
BaseUrl string `json:"base_url"` // E.g., example.com/st/v1
}
func (op *Operator) FindLog(logId []byte) (*Log, error) {
for _, log := range op.Logs {
if bytes.Equal(logId, log.Id) {
return log, nil
}
}
return nil, fmt.Errorf("no such log: %s", base64.StdEncoding.EncodeToString(logId))
}
|
