diff options
Diffstat (limited to 'tools/josef_experimental.py')
| -rwxr-xr-x | tools/josef_experimental.py | 67 |
1 files changed, 27 insertions, 40 deletions
diff --git a/tools/josef_experimental.py b/tools/josef_experimental.py index 4377b8b..4cb16f8 100755 --- a/tools/josef_experimental.py +++ b/tools/josef_experimental.py @@ -62,14 +62,16 @@ def get_proof_by_index(baseurl, index, tree_size): sys.exit(1) -base_urls = ["https://plausible.ct.nordu.net/", - "https://ct1.digicert-ct.com/log/", - "https://ct.izenpe.com/", - "https://log.certly.io/", - "https://ctlog.api.venafi.com/", - "https://ct.googleapis.com/aviator/", - "https://ct.googleapis.com/pilot/", - "https://ct.googleapis.com/rocketeer/", +base_urls = [ + "https://plausible.ct.nordu.net/", + # "https://ct1.digicert-ct.com/log/", + # "https://ct.izenpe.com/", + # "https://log.certly.io/", + # "https://ctlog.api.venafi.com/", + # "https://ct.googleapis.com/aviator/", + # "https://ct.googleapis.com/pilot/", + # "https://ct.googleapis.com/rocketeer/", + # "https://ct.ws.symantec.com/", ] logkeys = {} @@ -86,43 +88,28 @@ logkeys["https://ctlog.api.venafi.com/"] = get_public_key_from_file("../../venaf import Crypto.PublicKey.RSA as RSA from Crypto.Hash import SHA256 -for url in base_urls: - sth = get_sth(url) - signature = base64.b64decode(sth["tree_head_signature"]) - key = logkeys[url] - root_hash = base64.b64decode(sth["sha256_root_hash"]) +monitored_domains = [ + "google.com", + "preishelden.de", + "liu.se", + "nordu.net", + "symantec.com", +] - hash_alg, signature_alg, unpacked_signature = decode_signature(signature) - if signature_alg == 1: +raw_entry = get_entries(base_urls[0], 1000, 1000)["entries"] +orig_entries = [] - # rsa_key = RSA.importKey(key) - # verifier = PKCS1_v1_5.new(rsa_key) - - # version = struct.pack(">b", 0) - # signature_type = struct.pack(">b", 1) - # timestamp = struct.pack(">Q", sth["timestamp"]) - # tree_size = struct.pack(">Q", sth["tree_size"]) - # hash = base64.decodestring(sth["sha256_root_hash"]) +for item in raw_entry: + print item - # tree_head = version + signature_type + timestamp + tree_size + hash - # h = SHA256.new(tree_head) + cert_info = get_cert_info(item) + for md in monitored_domains: + if md in cert_info["subject"]: + print md + " certifed by " + cert_info["issuer"] - # print verifier - # print verifier.verify(h, unpacked_signature) - print "RSA Signature from " + url - check_sth_signature(url, sth, key) + print "\n\n" + print item - elif signature_alg == 3: - print "ECDSA signature from " + url - check_sth_signature(url, sth, key) - else: - print "Unknown signature algorithm from " + url -# print sth -# print "\n\n" + signature -# print "\n\n" + key -# print rsa_key - -# print "\n\n" + rsa_key.verify(root_hash, signature)
\ No newline at end of file |