summaryrefslogtreecommitdiff
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* Merge branch 'map-storage-signature'Linus Nordberg2017-03-011-27/+47
|\ | | | | | | | | Conflicts: NEWS.md
| * Rename a couple functions and variables; add two comments.Linus Nordberg2017-02-281-10/+15
| |
| * Support requirement that storage servers sign stored entriesstorage-signatureMagnus Ahltorp2017-02-171-27/+42
| | | | | | | | | | | | | | | | Make SCT cache mandatory. The signature server now requires signatures from the storage nodes, so if SCT is not present in the cache, always send entries to storage servers to collect signatures. Also send SCT when committing entry to storage servers.
* | Look for root last in list, not anywhere in list.Linus Nordberg2017-02-271-36/+36
| | | | | | | | | | | | | | | | Even if verify_chain() should not return a root cert that is not last in the chain, the code is now less confusing to read. Also, rename normalise_chain/3 to verify_chain to reflect what it actually does.
* | Don't store root cert twice when included in submission.Linus Nordberg2017-02-251-9/+12
| | | | | | | | Closes CATLFISH-96.
* | Do test public interface for normalise_chain/2.Linus Nordberg2017-02-251-12/+12
|/ | | | Catches CATLFISH-96.
* Support for Erlang/OTP 19perftest-fixMagnus Ahltorp2017-02-081-0/+9
|
* Parallelised merge, distribution phase.Linus Nordberg2017-02-011-1/+1
|
* Update copyright headers.Linus Nordberg2017-01-123-2/+5
|
* Log simple web request logging on level infoMagnus Ahltorp2016-11-221-2/+6
|
* Added back support for R16Magnus Ahltorp2016-11-221-0/+10
|
* Don't use erlang:timestamp/0 on R17.Linus Nordberg2016-09-151-1/+1
|
* Support R18 wrt detoxing precerts.Linus Nordberg2016-08-192-4/+11
| | | | Fixes CATLFISH-80.
* Use erlang:timestamp/0 instead of deprecated now/0.Linus Nordberg2016-08-181-1/+1
|
* Rename module compat -> catlfish_compat.Linus Nordberg2016-08-182-3/+3
| | | | Can't have two modules with the same name in a release.
* It's a string, not an integer.Linus Nordberg2016-08-181-6/+4
|
* Add compatibility layer for digging around in non-public data structures.Linus Nordberg2016-08-182-5/+31
|
* No need to strip "/" from path really.Linus Nordberg2015-11-131-5/+5
|
* Parametrise "application part" of URL.Linus Nordberg2015-11-132-15/+28
| | | | | Breaking out "ct/v1" to a separate argument to request(). Good for other applications.
* Whitespace.Linus Nordberg2015-11-132-16/+26
|
* Verify MTL against leaf hash before returning get-entries.Linus Nordberg2015-09-151-3/+4
| | | | Closes CATLFISH-50.
* Wrap entries in plop wrapperMagnus Ahltorp2015-08-191-12/+11
|
* Don't cons an improper list when serialising extra data for a precert.Linus Nordberg2015-08-191-1/+1
|
* Rename extra_data/3 and move it some.Linus Nordberg2015-08-071-14/+14
|
* Return correct extra-data for precerts too (closes CATLFISH-56).Linus Nordberg2015-08-061-57/+60
| | | | Verify precerts in make tests too.
* Always store and return root certificate (closes CATLFISH-55).Linus Nordberg2015-08-031-8/+7
|
* Implement rate limiting of add_chainMagnus Ahltorp2015-06-123-27/+135
|
* Don't answer public requests if STH is too old or nonexistentMagnus Ahltorp2015-06-121-0/+28
|
* Remove unused temporary variable.Linus Nordberg2015-06-101-9/+7
|
* Add verification of whole entry. Implement library call for plop verification.Magnus Ahltorp2015-06-101-6/+44
|
* Fix CATLFISH-45.Linus Nordberg2015-05-111-6/+4
| | | | https://project.nordu.net/browse/CATLFISH-45
* Rename html/2 to err400/2.Linus Nordberg2015-05-061-17/+17
|
* Dialyzer clean.Linus Nordberg2015-05-063-20/+23
|
* Remove an extra annoying debug log printout.Linus Nordberg2015-04-101-3/+0
|
* Fix copyright strings.Linus Nordberg2015-04-096-6/+6
|
* Verify that database entry actually contains the certificatemergeverify2Magnus Ahltorp2015-04-071-3/+6
|
* Cleanup tests and use urllib2.build_openercleanup-testsMagnus Ahltorp2015-03-311-2/+14
| | | | | | | | | Remove unused files Generate test config files directly in release directory Move test database files to "tests" directory Generate log key when preparing tests Report error when STH not found in v1.erl Make merge, fetchallcerts, submitcert, verifysct, and testcase1 take log key as argument
* Allow non-TLS httpnopublicssl3Magnus Ahltorp2015-03-312-17/+23
| | | | Closes CATLFISH-31
* Provide function for calculating entryhash from entryentryhash-mergeMagnus Ahltorp2015-03-271-0/+25
|
* Store rejected certificates.Linus Nordberg2015-03-251-52/+94
| | | | | | | Not storing the full chain, which would be even more useful. No rate limiting, which would be good. Also, reorganise some in x509.erl and add tests.
* Clarify that 0.test.pem is not a valid #'OTPCertificate'{}.Linus Nordberg2015-03-241-14/+14
| | | | Also some cosmetic changes.
* Add spec's for most functions.Linus Nordberg2015-03-232-11/+9
| | | | NOTE: We're not dialyzer clean yet.
* Formatting; remove debug printouts.Linus Nordberg2015-03-232-49/+21
|
* Add precert handling.Linus Nordberg2015-03-233-160/+382
|
* Cache SCT:sMagnus Ahltorp2015-03-081-12/+31
|
* Save STH instead of calculating a new one each time.Magnus Ahltorp2015-03-041-10/+2
|
* Added authentication between frontend and storage nodesMagnus Ahltorp2015-02-271-4/+28
|
* Fix a bug where verification of EC signatures made us crash.Linus Nordberg2015-02-271-33/+40
| | | | | Also, have valid_chain_p return boolean, add some debug logging and detect invalid signature types instead of crashing.
* Verify that known roots are indeed signing themselves.Linus Nordberg2015-02-272-22/+52
| | | | | | | This filters out certificates with signing algorithms that we can't handle. Also, make unit tests better.
* Even more debug logging.Linus Nordberg2015-02-251-0/+3
|
generated by cgit v1.1 at 2024-12-27 00:11:08 +0000