{"id":15289001,"url":"https://github.com/grahamedgecombe/nginx-ct","last_synced_at":"2025-04-06T09:10:37.160Z","repository":{"id":30606454,"uuid":"34161714","full_name":"grahamedgecombe/nginx-ct","owner":"grahamedgecombe","description":"Certificate Transparency module for nginx.","archived":false,"fork":false,"pushed_at":"2022-11-19T20:03:19.000Z","size":37,"stargazers_count":175,"open_issues_count":9,"forks_count":28,"subscribers_count":16,"default_branch":"master","last_synced_at":"2025-03-30T07:09:15.698Z","etag":null,"topics":["c","certificate-transparency","nginx"],"latest_commit_sha":null,"homepage":"https://grahamedgecombe.com/projects/nginx-ct","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"isc","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/grahamedgecombe.png","metadata":{"files":{"readme":"README.markdown","changelog":"CHANGELOG.markdown","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2015-04-18T10:27:34.000Z","updated_at":"2024-11-06T11:54:56.000Z","dependencies_parsed_at":"2023-01-14T17:18:31.630Z","dependency_job_id":null,"html_url":"https://github.com/grahamedgecombe/nginx-ct","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grahamedgecombe%2Fnginx-ct","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grahamedgecombe%2Fnginx-ct/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grahamedgecombe%2Fnginx-ct/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/grahamedgecombe%2Fnginx-ct/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/grahamedgecombe","download_url":"https://codeload.github.com/grahamedgecombe/nginx-ct/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247457803,"owners_count":20941906,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["c","certificate-transparency","nginx"],"created_at":"2024-09-30T15:55:33.071Z","updated_at":"2025-04-06T09:10:37.143Z","avatar_url":"https://github.com/grahamedgecombe.png","language":"C","funding_links":[],"categories":["Honourable mentions"],"sub_categories":[],"readme":"nginx Certificate Transparency module\n=====================================\n\nIntroduction\n------------\n\nThis module adds support for the TLS `signed_certificate_timestamp` extension to\nnginx, which is one of the mechanisms supported by Google's\n[Certificate Transparency][ct] project to deliver Signed Certificate Timestamps\nto TLS clients.\n\nBuilding\n--------\n\nAdd `--add-module=/path/to/nginx-ct` to the nginx `./configure` invocation.\n\nIf you are using nginx 1.9.11 or above, you can use\n`--add-dynamic-module=/path/to/nginx-ct` to build as a dynamic module.\n\nThe following versions of OpenSSL are supported:\n\n* OpenSSL 1.0.2 or above.\n* BoringSSL [4fac72e][boringssl] or above.\n\nLibreSSL is **not** supported as it doesn't provide either of the functions used\nto add the `signed_certificate_timestamp` extension to the response\n(`SSL_CTX_add_server_custom_ext` and `SSL_CTX_set_signed_cert_timestamp_list`).\n\nOpenSSL versions between 1.1.0 and 1.1.0e inclusive contain a [bug][openssl-bug]\nthat prevents this module from working with non-`default_server` `server`\nblocks. The bug is fixed in OpenSSL 1.1.0f.\n\nConfiguration\n-------------\n\nIf built as a dynamic module, add the following directives to the top level of\nyour configuration file:\n\n    load_module modules/ngx_ssl_ct_module.so;\n    load_module modules/ngx_http_ssl_ct_module.so;\n\nYou can also load `ngx_mail_ssl_ct_module.so` and `ngx_stream_ssl_ct_module.so`\nif you need `mail` or `stream` support.\n\nAdd the following directives, which are valid in `http`, `mail`, `stream` and\n`server` blocks, to your configuration file:\n\n    ssl_ct on;\n    ssl_ct_static_scts /path/to/sct/dir;\n\nThe module will read all `*.sct` files in the given directory, which are\nexpected to be encoded in binary (see the definition of\n`SignedCertificateTimestamp` struct in [section 3.2 of RFC 6962][rfc]). This is\nthe same format used by Apache's [mod\\_ssl\\_ct][apache] module.\n\nThe module is compatible with nginx's multiple certificate support if you are\nusing nginx 1.11.0 or above and are not using BoringSSL. Exactly one\n`ssl_ct_static_scts` directive must be specified for each `ssl_certificate`\ndirective:\n\n    ssl_ct on;\n\n    ssl_certificate /path/to/rsa.pem;\n    ssl_certificate_key /path/to/rsa.key;\n    ssl_ct_static_scts /path/to/rsa/scts;\n\n    ssl_certificate /path/to/ecdsa.pem;\n    ssl_certificate_key /path/to/ecdsa.key;\n    ssl_ct_static_scts /path/to/ecdsa/scts;\n\n[ct-submit][ct-submit] can be used to submit certificates to log servers and\nencode the `SignedCertificateTimestamp` struct in the appropriate format for use\nwith this module.\n\nLicense\n-------\n\nThis project is available under the terms of the ISC license, which is similar\nto the 2-clause BSD license. See the `LICENSE` file for the copyright\ninformation and licensing terms.\n\n[ct]: http://www.certificate-transparency.org/\n[rfc]: https://tools.ietf.org/html/rfc6962#section-3.2\n[apache]: https://httpd.apache.org/docs/trunk/mod/mod_ssl_ct.html\n[ct-submit]: https://github.com/grahamedgecombe/ct-submit\n[boringssl]: https://boringssl.googlesource.com/boringssl/+/4fac72e638c896c9fa30f5c6cd2fd7246f28f49e%5E!/\n[openssl-bug]: https://github.com/openssl/openssl/issues/2180\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgrahamedgecombe%2Fnginx-ct","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgrahamedgecombe%2Fnginx-ct","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgrahamedgecombe%2Fnginx-ct/lists"}