summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Add logs.json.HEADorigin/masterorigin/HEADmasterRob Stradling2017-10-201-1/+28
|
* Correctly identify a precertificate when the corresponding certificate is ↵Rob Stradling2017-10-201-2/+4
| | | | not available.
* Technically constrained id-kp-serverAuth intermediates must include a ↵Rob Stradling2017-10-201-1/+3
| | | | dirName constraint.
* Add a file upload option to the Lint Certificate and Lint TBSCertificate pages.Rob Stradling2017-10-091-15/+33
|
* Use a proper temporary table when running determine_ca_trust_purposes().Rob Stradling2017-10-091-9/+4
|
* Move update_ccadb_certificates.sqlRob Stradling2017-10-091-0/+0
|
* Draft microsoft-disclosures page.Rob Stradling2017-10-099-216/+674
|
* Various linting improvements.Rob Stradling2017-10-096-215/+155
|
* Fix a stray reference to the old mozilla_disclosure table.Rob Stradling2017-10-091-4/+4
|
* Make update_google_uptime.sh executable.Rob Stradling2017-09-221-0/+0
|
* Show log uptime, as measured by Google.Rob Stradling2017-09-223-20/+54
|
* Show the relevant Problem Reporting Mechanisms, as disclosed via CCADB, on ↵Rob Stradling2017-09-225-26/+74
| | | | each certificate page.
* DB: Web api: Refactor mozilla-disclosures.Rob Stradling2017-09-227-1598/+551
|
* Missing comma.Rob Stradling2017-08-311-1/+1
|
* Support ZLint.Rob Stradling2017-08-316-101/+184
|
* Add index on ct_log_entry.ENTRY_TIMESTAMP.Rob Stradling2017-08-311-0/+3
|
* Add zlint to linter_type.Rob Stradling2017-08-311-1/+1
|
* linttbscert and lintcert functions.Rob Stradling2017-08-242-0/+153
|
* Group intermediates that are revoked but not trusted by Mozilla in ↵Rob Stradling2017-08-241-1/+1
| | | | #disclosedbutnottrusted instead of #revoked, per request from Kathleen.
* Add 'Trusted For' field to the mozilla-disclosures #disclosureincomplete group.Rob Stradling2017-08-241-16/+81
|
* linttbscert and lintcert APIs.Rob Stradling2017-08-241-0/+52
|
* Code Signing is no longer applicable to the Mozilla trust context.Rob Stradling2017-08-241-1/+0
|
* Cope with empty Standard Audit Date.Rob Stradling2017-08-241-1/+1
|
* Evaluate Mozilla Root Store Policy v2.5 rules for technically constraining ↵Rob Stradling2017-08-243-29/+119
| | | | Secure Email CAs.
* Stripe monitored-logs rows. Fixes #32.Rob Stradling2017-07-061-0/+10
|
* Add trust context for the Adobe CDS trust program.Rob Stradling2017-07-051-8/+10
|
* Handle determine_ca_trust_purposes failures better.Rob Stradling2017-07-051-0/+4
|
* Add a less subtle option to download a certificate.Rob Stradling2017-07-041-4/+6
|
* Configurable batch size (end - start) for each log.Rob Stradling2017-06-291-0/+1
|
* Add Kernel Mode Code Signing trust purpose.Rob Stradling2017-06-292-2/+7
|
* Add some more EV OIDs.Rob Stradling2017-06-291-0/+26
|
* Use the ccadb_certificate table in place of the mozilla_disclosure table ↵Rob Stradling2017-06-272-49/+49
| | | | everywhere.
* Use new AllCertificateRecordsCSVFormat CCADB report for mozilla-disclosures.Rob Stradling2017-06-274-852/+760
|
* Experimental 'onlyonechain' parameter for gen-add-chain.Rob Stradling2017-06-232-8/+11
|
* Don't fall over critical Name Constraints.Rob Stradling2017-06-221-2/+2
|
* Parse the 'showSQL' parameter case-insensitively.Rob Stradling2017-06-191-1/+1
|
* GRANT SELECT on regularly recreated tables to GUEST.Rob Stradling2017-06-193-0/+6
|
* Don't evaluate technical constraints for root certs.Rob Stradling2017-06-191-0/+1
|
* Add 2 more intermediate disclosure categories.Rob Stradling2017-06-193-5/+178
|
* Show more details about CRL revocation / checking.Rob Stradling2017-06-191-21/+38
|
* Add trust context for the Android trust program.Rob Stradling2017-06-191-0/+2
|
* Show Earliest SCT and Listed Here Since for intermediate certificates ↵Rob Stradling2017-06-192-9/+45
| | | | awaiting disclosure to Mozilla (including those with incomplete disclosures).
* Merge pull request #29 from titanous/update-ccadb-urlsRob Stradling2017-06-191-19/+19
|\ | | | | Update CCADB URLs
| * Update CCADB URLsJonathan Rudenberg2017-06-171-19/+19
|/ | | | Signed-off-by: Jonathan Rudenberg <jonathan@titanous.com>
* Add the crt.sh ID (or 'UNKNOWN') to the output filenames from the Submission ↵Rob Stradling2017-05-111-1/+6
| | | | Assistant.
* Add option to ?d= by SHA-256(Certificate).Rob Stradling2017-05-113-8/+15
|
* Handle malformed base64 and missing 'created' dates in OneCRL.Rob Stradling2017-05-052-4/+20
|
* Use UTC consistently, rather than a mixture of GMT and UTC.Rob Stradling2017-05-051-3/+3
|
* Sort monitored logs by tree_size rather than latest_entry_id.Rob Stradling2017-05-051-2/+2
|
* Merge pull request #25 from alex/patch-1Rob Stradling2017-05-051-1/+1
|\ | | | | Fixed URL for links to chromium bug tracker
| * Fixed URL for links to chromium bug trackerAlex Gaynor2017-05-041-1/+1
|/
* Speedup display of search results by reducing the number of operations on ↵Rob Stradling2017-05-021-17/+19
| | | | long strings.
* Add Summary field, initially just showing the certificate type.Rob Stradling2017-04-071-0/+13
|
* Handle CA Owners for roots no longer in the Mozilla root program. Add ↵Rob Stradling2017-04-073-7/+69
| | | | script that updates the Mozilla cert validation telemetry data.
* Mozilla CERT_VALIDATION_SUCCESS_BY_CA telemetry.Rob Stradling2017-04-073-2/+324
|
* Various mozilla-disclosures and revoked-intermediates updates.Rob Stradling2017-02-243-5/+93
|
* Store CRL sizes.Rob Stradling2017-02-241-0/+4
|
* Update copyright year.Rob Stradling2017-02-221-1/+1
|
* Revoked intermediate report.Rob Stradling2017-02-222-2/+161
|
* Add Not After and Subject Name to the mozilla-onecrl page.Rob Stradling2017-02-032-1/+108
| | | | Add the script that updates the revocation information tables.
* Add/update some copyright notices.Rob Stradling2017-01-183-1/+37
|
* Add several new intermediate disclosure categories, and swap the order of ↵Rob Stradling2017-01-183-25/+336
| | | | the 'Revoked' and 'Technically Constrained' categories.
* Add index on notBefore, Issuer CA ID.Rob Stradling2017-01-171-0/+3
|
* Show revocation timestamps for CRL and OneCRL.Rob Stradling2017-01-171-4/+11
|
* Avoid creating double-duplicate intermediate disclosure records.Rob Stradling2017-01-171-14/+23
|
* Use POST, not GET, to submit the gen-add-chain form.Rob Stradling2017-01-171-1/+1
|
* Slight improvement to ordering on mozilla-disclosures.Rob Stradling2017-01-171-12/+12
|
* Cope with a new log that we haven't tried to contact yet.Rob Stradling2017-01-171-10/+10
|
* List all non-search crt.sh pages on the Advanced page. Move the monitored ↵Rob Stradling2017-01-171-25/+66
| | | | logs list to a separate page.
* HTML-escape title fields in Atom feeds.Rob Stradling2017-01-171-19/+19
|
* Fix pagination links.Rob Stradling2017-01-171-28/+28
|
* Show get-entries backlog for each log.Rob Stradling2017-01-171-22/+46
|
* Add a separate category for intermediate certs disclosed as 'Parent Cert ↵Rob Stradling2017-01-173-14/+87
| | | | Revoked'.
* Cope with an empty log.Rob Stradling2017-01-171-4/+4
|
* Add Mozilla OneCRL page. Use cached pages for up to 4hrs.Rob Stradling2017-01-171-5/+55
|
* Add another EV OID.Rob Stradling2017-01-171-0/+1
|
* Number the undisclosed intermediates.Rob Stradling2017-01-171-0/+2
|
* Show Root Owner on lint issue reports.Rob Stradling2017-01-171-2/+21
|
* Cache HTML responses for mozilla-disclosures and redacted-precertificates.Rob Stradling2017-01-103-4/+54
|
* gen-add-chain tool.Rob Stradling2017-01-103-1/+228
|
* Nowrap Logged At and Not Before dates.Rob Stradling2017-01-101-3/+3
|
* Now that cablint is much faster, run it (and cache the results) when ↵Rob Stradling2017-01-101-0/+1
| | | | importing each cert.
* Kathleen added an Alternate CRL field to mozilla_revoked_disclosures.csv.Rob Stradling2017-01-101-0/+1
|
* Add crt.sh ID link to search results pages, make 'Not Before' plain text, ↵Rob Stradling2017-01-101-17/+29
| | | | and make 'Issuer Name' link to the Issuer CA record rather than to the certificate.
* Show revocation via CRL.Rob Stradling2017-01-101-1/+48
|
* Keep track of unique CRL URLs.Rob Stradling2017-01-103-0/+50
|
* Show the full SHA-256 hash for 'Unknown to crt.sh' intermediate disclosures.Rob Stradling2017-01-101-1/+1
|
* Remove broken mozilla-disclosure unknown cert links.Rob Stradling2017-01-101-1/+1
|
* Eliminate unnecessary duplicate mozilla_disclosure records.Rob Stradling2017-01-101-1/+4
|
* Show 'Root Owner / Certificate' (where known) on each certificate page.Rob Stradling2017-01-101-0/+8
|
* Summarize intermediates that require (further) disclosure.Rob Stradling2017-01-101-2/+61
|
* Update copyright notice.Rob Stradling2017-01-101-1/+1
|
* Show Included Root / Owner (where known) for each CA certificate on the ↵Rob Stradling2017-01-102-124/+307
| | | | mozilla-disclosures page.
* Fix sha256 links on mozilla-disclosures page.Rob Stradling2017-01-101-8/+8
|
* Support CRLset revocations by SPKI.Rob Stradling2016-10-071-1/+2
|
* Add some more EV OID trust purposes.Rob Stradling2016-10-051-1/+4
|
* Use correct record for IS_TIME_VALID.Rob Stradling2016-10-051-1/+1
|
* Kathleen removed a duplicate serial number field from ↵Rob Stradling2016-10-051-1/+0
| | | | mozilla_revoked_disclosures.csv.
* Set Cache-Control header for Atom feeds and error pages.Rob Stradling2016-09-271-3/+14
|
* Sync with Kathleen's latest changes to the various Salesforce reports.Rob Stradling2016-09-272-158/+162
| | | | mozilla-disclosures now lists SHA-256(Certificate) instead of SHA-1(Certificate).