matching strings from cert info against domain-names of interest

1 files changed, 27 insertions, 40 deletions

diff --git a/tools/josef_experimental.py b/tools/josef_experimental.py
index 4377b8b..4cb16f8 100755
--- a/tools/josef_experimental.py
+++ b/tools/josef_experimental.py
@@ -62,14 +62,16 @@ def get_proof_by_index(baseurl, index, tree_size):
         sys.exit(1)
 
 
-base_urls = ["https://plausible.ct.nordu.net/",
-            "https://ct1.digicert-ct.com/log/", 
-            "https://ct.izenpe.com/",
-            "https://log.certly.io/", 
-            "https://ctlog.api.venafi.com/",
-            "https://ct.googleapis.com/aviator/", 
-            "https://ct.googleapis.com/pilot/",
-            "https://ct.googleapis.com/rocketeer/",
+base_urls = [
+            "https://plausible.ct.nordu.net/",
+            # "https://ct1.digicert-ct.com/log/", 
+            # "https://ct.izenpe.com/",
+            # "https://log.certly.io/", 
+            # "https://ctlog.api.venafi.com/",
+            # "https://ct.googleapis.com/aviator/", 
+            # "https://ct.googleapis.com/pilot/",
+            # "https://ct.googleapis.com/rocketeer/",
+            # "https://ct.ws.symantec.com/",
             ]
 
 logkeys = {}
@@ -86,43 +88,28 @@ logkeys["https://ctlog.api.venafi.com/"] = get_public_key_from_file("../../venaf
 import Crypto.PublicKey.RSA as RSA
 from Crypto.Hash import SHA256
 
-for url in base_urls:
-    sth = get_sth(url)
-    signature = base64.b64decode(sth["tree_head_signature"])
-    key = logkeys[url]
-    root_hash = base64.b64decode(sth["sha256_root_hash"])
+monitored_domains = [
+    "google.com",
+    "preishelden.de",
+    "liu.se",
+    "nordu.net",
+    "symantec.com",
+]
 
-    hash_alg, signature_alg, unpacked_signature = decode_signature(signature)
-    if signature_alg == 1:
+raw_entry = get_entries(base_urls[0], 1000, 1000)["entries"]
+orig_entries = []
 
-        # rsa_key = RSA.importKey(key)
-        # verifier = PKCS1_v1_5.new(rsa_key)
-        
-        # version = struct.pack(">b", 0)
-        # signature_type = struct.pack(">b", 1)
-        # timestamp = struct.pack(">Q", sth["timestamp"])
-        # tree_size = struct.pack(">Q", sth["tree_size"])
-        # hash = base64.decodestring(sth["sha256_root_hash"])
+for item in raw_entry:
+    print  item
 
-        # tree_head = version + signature_type + timestamp + tree_size + hash
-        # h = SHA256.new(tree_head)
+    cert_info = get_cert_info(item)
+    for md in monitored_domains:
+        if md in cert_info["subject"]:
+            print md + " certifed by " + cert_info["issuer"]    
 
-        # print verifier
-        # print verifier.verify(h, unpacked_signature)
-        print "RSA Signature from " + url
-        check_sth_signature(url, sth, key)
+    print "\n\n"
+    print item
 
 
 
-    elif signature_alg == 3:
-        print "ECDSA signature from " + url
-        check_sth_signature(url, sth, key)
-    else:
-        print "Unknown signature algorithm from " + url
 
-# print sth
-# print "\n\n" + signature
-# print "\n\n" + key
-# print rsa_key
-
-# print "\n\n" + rsa_key.verify(root_hash, signature)
\ No newline at end of file