package rootsanalyzer

import "github.com/google/monologue/rootsanalyzer"

Package rootsanalyzer reports on changes in the set of root certificates returned by a CT Log's get-roots endpoint.

Index ¶

• func GenerateCertID(root *x509.Certificate) ([32]byte, error)
• func GenerateSetID(roots []*x509.Certificate) (storage.RootSetID, error)
• func Run(ctx context.Context, st storage.RootsReader, rep incident.Reporter, l *ctlog.Log)

Functions ¶

func GenerateCertID ¶

func GenerateCertID(root *x509.Certificate) ([32]byte, error)

GenerateCertID returns SHA-256 of certificate's DER representation.

func GenerateSetID ¶

func GenerateSetID(roots []*x509.Certificate) (storage.RootSetID, error)

GenerateSetID returns ID for a set of root-certificates. Order or multi-entries of a same certificate do not influence the ID.

func Run ¶

func Run(ctx context.Context, st storage.RootsReader, rep incident.Reporter, l *ctlog.Log)

Run starts a Roots Analyzer, which watches a CT log's root certificates and creates incident reports for changes to them.

Source Files ¶

rootsanalyzer.go rootset_id.go