Commit Graph

  • 6db3f7564c Add function to reconstruct pre-cert TBS from cert TBS Andrew Ayer 2016-05-16 11:32:48 -0700
  • ae59c317dc Ignore empty DNS names Andrew Ayer 2016-05-13 10:31:13 -0700
  • 2bed88e7c5 Rework watchlist Andrew Ayer 2016-05-12 11:30:59 -0700
  • 7196ec5217 Use $CERTSPOTTER_STATE_DIR to specify state directory Andrew Ayer 2016-05-12 10:53:57 -0700
  • dac062e17d Add unit tests for MatchesWildcard Andrew Ayer 2016-05-10 14:29:10 -0700
  • f9432ae4b9 Reverse order of certspotter.MatchesWildcard arguments Andrew Ayer 2016-05-10 14:29:04 -0700
  • 92fbdcb947 Support crazy wildcards (not just in the left-most label) Andrew Ayer 2016-05-10 10:37:10 -0700
  • e99ee481a4 Disable check of pre-cert poision value Andrew Ayer 2016-05-09 15:46:14 -0700
  • 9342adcd93 Tighten up the cert information output Andrew Ayer 2016-05-09 15:41:00 -0700
  • b79cb31413 Move package to software.sslmate.com/src/certspotter Andrew Ayer 2016-05-04 12:19:59 -0700
  • 1e582e2e0c License under the MPL 2.0 Andrew Ayer 2016-05-04 11:53:48 -0700
  • 670cddafbc Rename project to certspotter Andrew Ayer 2016-05-04 11:49:07 -0700
  • ea3db97486 Only replace DNS label with placeholder if it's utterly unparsable Andrew Ayer 2016-05-04 11:43:02 -0700
  • 60636ba2d7 Move Identifiers from CertInfo to EntryInfo Andrew Ayer 2016-05-03 11:58:59 -0700
  • 5f4e35843a Display SANs in output Andrew Ayer 2016-05-02 11:59:55 -0700
  • df5ad71a40 Support for IP addresses encoded as strings in CNs/DNS SANs Andrew Ayer 2016-05-02 11:38:08 -0700
  • 82167b8151 Additional handling of pathological DNS names Andrew Ayer 2016-05-01 17:02:52 -0700
  • 3ec8a0a3db Ignore IP address SANs with an invalid length Andrew Ayer 2016-05-01 14:52:19 -0700
  • ca8f60740a Trim trailing dots from DNS names Andrew Ayer 2016-05-01 12:49:26 -0700
  • 3c220e56f6 scanner: reduce channel queue buffer length Andrew Ayer 2016-05-01 12:49:07 -0700
  • a0859acad3 Remove defunct Certly log Andrew Ayer 2016-04-30 15:03:16 -0700
  • 847b7129e8 Monitor for all DNS names that _might_ match a monitored domain Andrew Ayer 2016-04-29 09:02:03 -0700
  • ec68dde647 Only allow * and ? as entire DNS name labels Andrew Ayer 2016-04-29 08:45:54 -0700
  • 2c9df274e9 Gracefully handle all manner of poorly encoded identifiers Andrew Ayer 2016-04-28 21:26:59 -0700
  • a072440db8 Handle certificates with multiple Basic Constraints extensions Andrew Ayer 2016-04-26 18:06:59 -0700
  • 65ed742477 Support wildcards Andrew Ayer 2016-04-26 14:49:39 -0700
  • 4132ed5e9f Add support for IDNs Andrew Ayer 2016-04-26 14:38:09 -0700
  • 19c5f86d23 Allow DNS SANs to contain UTF-8 Andrew Ayer 2016-04-26 14:14:08 -0700
  • 2426817cd5 Raise parse error if certain strings are improperly encoded Andrew Ayer 2016-04-24 09:11:28 -0700
  • 2d2aa37202 Parse common names separately from DNS names Andrew Ayer 2016-04-22 20:58:33 -0700
  • ef0b46b7a5 Remove defunct Wosign log Andrew Ayer 2016-04-14 17:55:50 -0700
  • e091186d83 Save consistency proof along with evidence of misbehavior Andrew Ayer 2016-04-06 08:10:06 -0700
  • db2cd2c458 logclient: work around HTTP/2 issue Andrew Ayer 2016-03-27 11:54:34 -0700
  • 80bfe1321c Add helpers to get fingerprint/hashes in byte form Andrew Ayer 2016-03-26 18:04:22 -0700
  • ef395b8e60 Add function to validate a pre-cert Andrew Ayer 2016-03-23 21:03:00 -0700
  • 81bfa0bbd8 Add ctparsewatch Andrew Ayer 2016-03-23 20:19:39 -0700
  • 786e9e3460 Add a relaxed ASN.1 Time parser Andrew Ayer 2016-03-23 20:18:26 -0700
  • af14fca70f Add HasParseErrors method to EntryInfo Andrew Ayer 2016-03-23 20:18:12 -0700
  • 616ac0cb83 Adjust gitignore Andrew Ayer 2016-03-23 20:04:55 -0700
  • eded2ff458 Ensure ParseDNSNames does not return a nil slice Andrew Ayer 2016-03-22 17:17:38 -0700
  • 3b59332bf1 Rename a function for clarity Andrew Ayer 2016-03-17 16:34:53 -0700
  • a071e9490a Replace embedded X509 parser with my own lightweight parser Andrew Ayer 2016-03-16 16:58:00 -0700
  • 5ccf9fdcd3 ctwatch: allow state dir to be set by $CTWATCH_STATE_DIR Andrew Ayer 2016-03-08 07:09:26 -0800
  • f988d05b4b Decode JSON directly into []byte Andrew Ayer 2016-03-08 07:01:10 -0800
  • 2608a74e66 Make trailing garbage a fatal error when extracting DNS names Andrew Ayer 2016-02-22 19:35:21 -0800
  • 08fa700d29 scanner: don't prefix log messages with log URI Andrew Ayer 2016-02-22 19:23:08 -0800
  • 5803389588 Fix some pointer inconsistencies in code Andrew Ayer 2016-02-22 15:29:52 -0800
  • 09c37cfdfd Clarify a flag Andrew Ayer 2016-02-22 15:14:17 -0800
  • 8f3bd3b6ff Improve logging Andrew Ayer 2016-02-22 14:58:11 -0800
  • b297ba9967 Use bits in the exit code to convey what happened Andrew Ayer 2016-02-22 14:45:50 -0800
  • 40123f9ba8 Allow . to be specified on stdin as well Andrew Ayer 2016-02-22 14:18:56 -0800
  • 94ccbc0a4f Add backoff during fetch errors Andrew Ayer 2016-02-22 14:11:47 -0800
  • df6527b165 Change -all_time to only affect logs we haven't seen before Andrew Ayer 2016-02-20 12:04:07 -0800
  • ff44576c87 Save old and new STHs if consistency proof fails Andrew Ayer 2016-02-18 12:40:21 -0800
  • 672491e065 Fix bug where we were returning a nil tree builder Andrew Ayer 2016-02-18 11:58:00 -0800
  • 16bf546258 Embed Google CT library, with my own changes Andrew Ayer 2016-02-18 10:44:56 -0800
  • 3c33dc8277 Remove sha1watch Andrew Ayer 2016-02-18 10:41:55 -0800
  • e91d7bacbd Minor cleanup to improve encapsulation Andrew Ayer 2016-02-18 10:23:07 -0800
  • b47d35a005 Rename some types/functions for clarity Andrew Ayer 2016-02-18 10:15:56 -0800
  • 35eef25f4a Rename function for clarity Andrew Ayer 2016-02-18 10:09:33 -0800
  • 9558efc955 Verify STH signatures Andrew Ayer 2016-02-17 16:03:49 -0800
  • 4b304fd192 Audit Merkle tree when retrieving entries Andrew Ayer 2016-02-17 14:54:25 -0800
  • b6dec7822d Overhaul to be more robust and simpler Andrew Ayer 2016-02-09 10:28:52 -0800
  • 1dcbe91877 WriteCertRepository: avoid serializing precerts twice Andrew Ayer 2016-02-07 14:47:05 -0800
  • a79cc26570 Include filename of saved cert in output/script invocation Andrew Ayer 2016-02-05 08:20:12 -0800
  • cfaf126284 To monitor all domains, require "." to be specified Andrew Ayer 2016-02-05 08:13:11 -0800
  • e73a5a89a7 Ignore non-fatal errors when parsing root certificates Andrew Ayer 2016-02-05 07:57:15 -0800
  • 678e8bddc8 Include log URI in error messages Andrew Ayer 2016-02-05 07:47:42 -0800
  • 1b17c25747 Decrease log severity of non-fatal parse errors Andrew Ayer 2016-02-05 07:45:49 -0800
  • 3f596730a0 New and simplified multi-log operation Andrew Ayer 2016-02-04 20:16:25 -0800
  • a418a3686d Initial commit Andrew Ayer 2016-02-04 18:45:37 -0800