Update TLS SCT

This commit is contained in:
Zhi Guan
2026-06-10 23:44:31 +08:00
parent 79c6947ee9
commit b48f2c3772
4 changed files with 77 additions and 40 deletions

View File

@@ -24,21 +24,6 @@ extern "C" {
#endif
/*
Certificate Transparency (RFC 6962) uses TLS-style presentation language for
Signed Certificate Timestamp (SCT) objects. When SCTs are carried in an X.509
or OCSP extension, the extension value is an ASN.1 OCTET STRING whose contents
are the TLS-serialized SignedCertificateTimestampList.
id-ct OBJECT IDENTIFIER ::= { 1 3 6 1 4 1 11129 2 4 }
id-ct-precertificate-scts OBJECT IDENTIFIER ::= { id-ct 2 }
ExtnValue contents ::=
SignedCertificateTimestampList
*/
enum {
SCT_version_v1 = 0,
};
@@ -139,11 +124,6 @@ int signed_certificate_timestamp_verify(const uint8_t *sct, size_t sct_len,
X509_KEY *key, const DIGEST *digest);
/*
在验证sct_list的时候我们需要提供一组公钥的信息包括X509_KEY, Key_hash, URL , description 这三个是最重要的了
*/
typedef struct {
X509_KEY log_key;
uint8_t log_id[32];