GitHub - AGWA-labs/ctredactionexperiment: An implementation of a proposal for simplified name redaction in Certificate Transparency

This repository has been archived by the owner on May 1, 2022. It is now read-only.

AGWA-labs / ctredactionexperiment Public archive

Notifications You must be signed in to change notification settings
Fork 0
Star 0

An implementation of a proposal for simplified name redaction in Certificate Transparency

mailarchive.ietf.org/arch/msg/trans/5l9gc0gqx96k6g4fujspcrt7v7k

MPL-2.0 license

0 stars 0 forks Branches Tags Activity

Star

Notifications

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 5 Commits
examples		examples
.gitignore		.gitignore
COPYING		COPYING
README		README
main.go		main.go
precerts.go		precerts.go
x509.go		x509.go

Repository files navigation

An implementation of
https://mailarchive.ietf.org/arch/msg/trans/gGWZhqCXG0wlkktB_d0a2fPM4VU
along with the fix suggested here:
https://mailarchive.ietf.org/arch/msg/trans/UihNrMpEwxtAmXx80vfLlm6U2SE

This repository builds a program named ctredactionexperiment which reads
an X.509 certificate (in DER) from STDIN and writes the reconstructed
pre-certificate TBSCertificate (in DER) to STDOUT.


BUILD:
	go build


EXAMPLES:

An unredacted certificate:
	openssl x509 -outform DER < examples/unredacted.crt | ./ctredactionexperiment | openssl asn1parse -inform DER

An redacted certificate:
	openssl x509 -outform DER < examples/redacted.crt | ./ctredactionexperiment | openssl asn1parse -inform DER

An redacted certificate with mismatched label:
	openssl x509 -outform DER < examples/bad_redacted.crt | ./ctredactionexperiment