https://github.com/hlandau/expect-ct-lite

OpenSSL example code for Expect-CT Lite
https://github.com/hlandau/expect-ct-lite

certificate-transparency openssl ssl tls

Last synced: about 1 month ago
JSON representation

OpenSSL example code for Expect-CT Lite

• Host: GitHub
• URL: https://github.com/hlandau/expect-ct-lite
• Owner: hlandau
• Created: 2023-10-21T13:14:19.000Z (about 1 year ago)
• Default Branch: master
• Last Pushed: 2023-10-21T14:27:51.000Z (about 1 year ago)
• Last Synced: 2024-05-01T13:04:05.801Z (7 months ago)
• Topics: certificate-transparency, openssl, ssl, tls
• Language: C
• Homepage: https://www.devever.net/~hl/expect-ct-lite
• Size: 2.93 KB
• Stars: 2
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
Expect-CT Lite Demo Code for OpenSSL

====================================

This is demo code for how to implement [“Expect-CT Lite", as proposed in this

article](https://www.devever.net/~hl/expect-ct-lite), using OpenSSL.

The idea is that this can make it easy for client applications to do

Certificate Transparency enforcement in a way which is better than not doing

any Certificate Transparency enforcement at all. (Of course, doing full

Certificate Transparency SCT signature validation is even better, but may

substantially increases application complexity and maintenance burden, [as

noted in the article](https://www.devever.net/~hl/expect-ct-lite).)

To use, run `make` to build, then run (for example) `./client

www.example.com:443`.

Released under the MIT License.

[If you have any comments or questions on this code, you can contact me

here.](https://www.devever.net/~hl/contact)