https://github.com/hlandau/expect-ct-lite
OpenSSL example code for Expect-CT Lite
https://github.com/hlandau/expect-ct-lite
certificate-transparency openssl ssl tls
Last synced: about 1 year ago
JSON representation
OpenSSL example code for Expect-CT Lite
- Host: GitHub
- URL: https://github.com/hlandau/expect-ct-lite
- Owner: hlandau
- Created: 2023-10-21T13:14:19.000Z (over 2 years ago)
- Default Branch: master
- Last Pushed: 2023-10-21T14:27:51.000Z (over 2 years ago)
- Last Synced: 2025-01-30T15:42:54.391Z (over 1 year ago)
- Topics: certificate-transparency, openssl, ssl, tls
- Language: C
- Homepage: https://www.devever.net/~hl/expect-ct-lite
- Size: 2.93 KB
- Stars: 2
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
Expect-CT Lite Demo Code for OpenSSL
====================================
This is demo code for how to implement [“Expect-CT Lite", as proposed in this
article](https://www.devever.net/~hl/expect-ct-lite), using OpenSSL.
The idea is that this can make it easy for client applications to do
Certificate Transparency enforcement in a way which is better than not doing
any Certificate Transparency enforcement at all. (Of course, doing full
Certificate Transparency SCT signature validation is even better, but may
substantially increases application complexity and maintenance burden, [as
noted in the article](https://www.devever.net/~hl/expect-ct-lite).)
To use, run `make` to build, then run (for example) `./client
www.example.com:443`.
Released under the MIT License.
[If you have any comments or questions on this code, you can contact me
here.](https://www.devever.net/~hl/contact)