From f0b40ee24cb2e95f3ce1a7d06473459f3de2b7d5 Mon Sep 17 00:00:00 2001 From: Linus Nordberg Date: Thu, 23 Oct 2014 14:42:42 +0200 Subject: Log (info) when adding and rejecting a certificate chain. Writing to stdout for now, until we've decided on logging framework. --- src/v1.erl | 4 ++++ src/x509.erl | 6 +++++- 2 files changed, 9 insertions(+), 1 deletion(-) diff --git a/src/v1.erl b/src/v1.erl index 46b5235..8c748e5 100644 --- a/src/v1.erl +++ b/src/v1.erl @@ -25,8 +25,12 @@ Roots = catlfish:known_roots(), case x509:normalise_chain(Roots, [LeafCert|CertChain]) of {ok, [Leaf | Chain]} -> + io:format("[info] adding ~p~n", + [x509:cert_string(LeafCert)]), catlfish:add_chain(Leaf, Chain); {Err, Msg} -> + io:format("[info] rejecting ~p: ~p~n", + [x509:cert_string(LeafCert), Err]), html("add-chain: ", [Msg, Err]) end; Invalid -> diff --git a/src/x509.erl b/src/x509.erl index 8b1211d..9b6b386 100644 --- a/src/x509.erl +++ b/src/x509.erl @@ -2,7 +2,7 @@ %%% See LICENSE for licensing information. -module(x509). --export([normalise_chain/2]). +-export([normalise_chain/2, cert_string/1]). -include_lib("public_key/include/public_key.hrl"). @@ -84,6 +84,10 @@ public_key(#'OTPCertificate'{ subjectPublicKey = Key}}}) -> Key. +cert_string(Der) -> + lists:flatten([io_lib:format("~2.16.0B", [X]) || + X <- binary_to_list(crypto:hash(sha, Der))]). + %%%%%%%%%%%%%%%%%%%% %% Precertificates according to draft-ietf-trans-rfc6962-bis-04. -- cgit v1.1