github/certigo
4
0
Fork 0
mirror of https://github.com/square/certigo.git synced 2026-10-20 17:38:35 +00:00
Code Issues Releases Wiki Activity
605 Commits 16 Branches 35 Tags
master
Commit Graph
605 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Nik Unger 1365cc1462 Update to latest stable Go toolchain 
The latest version of the Go compiler is always the best compiler
for old versions of the language, so this commit upgrades from
1.19 to stable (currently 1.24).

Also added a small comment about the purpose of `./build`
 2025-07-23 15:43:18 -04:00
Michael Weissbacher ba52fa4862 Merge pull request #316 from testwill/replace-loop 
chore: slice replace loop
 2025-06-23 17:45:46 -04:00
Michael Weissbacher 702bb339e6 Merge branch 'master' into replace-loop 2025-06-23 17:40:16 -04:00
Michael Weissbacher a669dc8044 Merge pull request #342 from square/mweissbacher/ct-bump 
CT Log update
 2025-06-23 17:33:21 -04:00
Michael Weissbacher d3cbd15890 CT Log update 
go generate ./...
 2025-06-23 17:02:16 -04:00
suzy-huang bf6413f1bf Merge pull request #339 from square/lsc/update_cryptid_codeowners 
[LSC] Update cryptid reference to idinfra-staff
 2025-06-23 09:34:42 -07:00
Michael Weissbacher 60b217c14e Merge branch 'master' into lsc/update_cryptid_codeowners 2025-06-23 11:35:21 -04:00
Michael Weissbacher 15e0185c26 Merge pull request #337 from square/dependabot/go_modules/github.com/fatih/color-1.18.0 
Bump github.com/fatih/color from 1.13.0 to 1.18.0
 2025-06-20 16:29:30 -04:00
dependabot[bot] 7c63cdce9b Bump github.com/fatih/color from 1.13.0 to 1.18.0 
Bumps [github.com/fatih/color](https://github.com/fatih/color) from 1.13.0 to 1.18.0.
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](https://github.com/fatih/color/compare/v1.13.0...v1.18.0)

---
updated-dependencies:
- dependency-name: github.com/fatih/color
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-06-20 20:19:34 +00:00
Michael Weissbacher b78d9884a9 Merge pull request #338 from square/dependabot/go_modules/software.sslmate.com/src/go-pkcs12-0.5.0 
Bump software.sslmate.com/src/go-pkcs12 from 0.2.0 to 0.5.0
 2025-06-20 16:18:13 -04:00
dependabot[bot] 04f14af9dd Bump software.sslmate.com/src/go-pkcs12 from 0.2.0 to 0.5.0 
Bumps software.sslmate.com/src/go-pkcs12 from 0.2.0 to 0.5.0.

---
updated-dependencies:
- dependency-name: software.sslmate.com/src/go-pkcs12
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-06-20 19:04:53 +00:00
Michael Weissbacher fa08d8599c Merge pull request #336 from square/dependabot/go_modules/github.com/mattn/go-colorable-0.1.14 
Bump github.com/mattn/go-colorable from 0.1.12 to 0.1.14
 2025-06-20 15:03:32 -04:00
Michael Weissbacher 130599d8ee Merge branch 'master' into dependabot/go_modules/github.com/mattn/go-colorable-0.1.14 2025-06-20 15:01:59 -04:00
Michael Weissbacher 0ab117d87e Merge pull request #333 from square/dependabot/go_modules/github.com/stretchr/testify-1.10.0 
Bump github.com/stretchr/testify from 1.8.2 to 1.10.0
 2025-06-20 15:01:50 -04:00
Michael Weissbacher 5fbe7a4721 Merge branch 'master' into dependabot/go_modules/github.com/mattn/go-colorable-0.1.14 2025-06-20 15:00:26 -04:00
Michael Weissbacher 96c24e3182 Merge branch 'master' into dependabot/go_modules/github.com/stretchr/testify-1.10.0 2025-06-20 15:00:05 -04:00
Michael Weissbacher 6dde1da85b Merge pull request #341 from square/mweissbacher-bump-gh-actions-test 
Bumping github action versions
 2025-06-20 14:53:46 -04:00
Michael Weissbacher 03db869ef5 bumping linter version 2025-06-20 14:16:28 -04:00
Michael Weissbacher 0fcfc9a458 bump action versions for release 2025-06-20 14:12:51 -04:00
Michael Weissbacher ed8ffc1ea6 bump action versions for lint 2025-06-20 13:26:42 -04:00
Michael Weissbacher 77e5eb877f Bump action versions in test.yaml 2025-06-20 13:16:50 -04:00
Suzy Huang 8a47d1fca7 update cryptid references to idinfra 2025-06-17 17:39:59 -07:00
dependabot[bot] bec5d46148 Bump github.com/mattn/go-colorable from 0.1.12 to 0.1.14 
Bumps [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) from 0.1.12 to 0.1.14.
- [Commits](https://github.com/mattn/go-colorable/compare/v0.1.12...v0.1.14)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-colorable
  dependency-version: 0.1.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-06-17 02:49:55 +00:00
dependabot[bot] 9adb1bd7ac Bump github.com/stretchr/testify from 1.8.2 to 1.10.0 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.10.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-06-17 02:43:51 +00:00
guoguangwu 813ad1d5a6 chore: slice replace loop 2023-07-03 16:16:43 +08:00
Mat Byczkowski b78a846ab9 Merge pull request #303 from square/dependabot/go_modules/github.com/stretchr/testify-1.8.2 
Bump github.com/stretchr/testify from 1.8.0 to 1.8.2
 2023-03-02 12:53:34 -08:00
dependabot[bot] 4dee94d5a2 Bump github.com/stretchr/testify from 1.8.0 to 1.8.2 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.0 to 1.8.2.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.0...v1.8.2)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-27 03:12:40 +00:00
Violet Dong eeeebda27a Merge pull request #301 from square/violet/update_cism_to_cryptid 
update cism to cryptographic-identity
 2023-02-14 12:41:07 -05:00
Violet Dong 4956ed199e update cism to cryptographic-identity 2023-02-10 11:53:28 -05:00
John Wood abfe56fea8 Fetch latest CT log info (#297) 2022-11-17 13:10:15 -08:00
Isaac Semaya 5d695f622f Merge pull request #296 from square/dependabot/go_modules/github.com/google/certificate-transparency-go-1.1.4 
Bump github.com/google/certificate-transparency-go from 1.1.3 to 1.1.4
 2022-10-24 10:15:24 -07:00
dependabot[bot] b17c2a8ea9 Bump github.com/google/certificate-transparency-go from 1.1.3 to 1.1.4 
Bumps [github.com/google/certificate-transparency-go](https://github.com/google/certificate-transparency-go) from 1.1.3 to 1.1.4.
- [Release notes](https://github.com/google/certificate-transparency-go/releases)
- [Changelog](https://github.com/google/certificate-transparency-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/certificate-transparency-go/compare/v1.1.3...v1.1.4)

---
updated-dependencies:
- dependency-name: github.com/google/certificate-transparency-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-10-24 02:12:08 +00:00
Cedric Staub 75f2ec06b4 Switch to using SSLMate's PKCS#12 library (#293) 2022-09-21 10:36:59 -07:00
John Wood 44210f297c Remove ioutil (#289) 2022-08-11 10:59:59 -07:00
John Wood 3041543f46 Move to Go 1.19 2022-08-09 12:41:02 -07:00
John ShiehJohn WoodSven Wick
 		eea7ad61c3 Add zlint support (#286) 
Co-authored-by: John Wood <jwood@squareup.com>
Co-authored-by: Sven Wick <sven.wick@gmx.de>
 2022-08-01 12:01:38 -06:00
Mat Byczkowski 76eddf7ad9 Merge pull request #284 from vaporup/patch-1 
Update README.md
 2022-07-22 12:38:34 -07:00
Sven Wick a6e3354dc8 Update README.md 
Remove leading whitespace
 2022-07-19 15:45:34 +02:00
John Wood 79f1ecf29f Unconditionally add forward slash in OCSP GET requests (#282) 2022-07-01 13:41:01 -07:00
Isaac Semaya 4e0e518444 Merge pull request #278 from square/dependabot/go_modules/github.com/stretchr/testify-1.8.0 
Bump github.com/stretchr/testify from 1.7.5 to 1.8.0
 2022-06-30 16:36:45 -07:00
Isaac Semaya 9c39690e9b Merge branch 'master' into dependabot/go_modules/github.com/stretchr/testify-1.8.0 2022-06-30 16:29:25 -07:00
John Wood 0a56dcc30e Use Go generate instead of a makefile (#279) 
* Use Go generate instead of a makefile

* Meet the go generate specifications
 2022-06-30 11:09:52 -07:00
dependabot[bot] f7e8197bdd Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.5 to 1.8.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.5...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-06-30 02:15:56 +00:00
John Wood 37a41318ba Add support for printing SCTs (#277) 
* Address PR comments
 2022-06-29 17:35:59 -07:00
John Wood 3871aa0f39 Update Go version to 1.18 (#276) 
* Update Go version

* Remove unsupported SHA1 cert test
 2022-06-28 17:49:00 -07:00
John Wood 9a1ff6da3d Update to 1.16 (#275) v1.16.0 2022-06-28 14:59:36 -07:00
John Wood 4c8f1c5862 Fix OCSP checking (#274) 
Fixes #272. The root of the problem is that we're asking the wrong OCSP servers. The current code does something like:

leaf, issuers := chain[0], chain[1:]
for _, issuer := range issuers {
  // check for revocation of leaf via issuer.OCSPServer
}

The main problem is that OCSPServer is the URI of the OCSP server for that certificate, and by asking issuer.OCSPServer about leaf, we're requesting OCSP responses from the wrong server. We should be checking leaf.OCSPServer in this example instead of issuer.OCSPServer.

The second problem is that the loop makes no sense. One would not expect any OCSP server in a given chain to be authoritative for a given leaf.

If you do certigo connect google.com, you'll see

Certificate has OCSP extension, but was unable to check status:
	ocsp: error from server: unauthorized

The "unauthorized" means the OCSP server we asked doesn't know anything about the cert we asked about.
 2022-06-28 14:51:03 -07:00
Isaac Semaya f81bda15e6 Merge pull request #273 from square/dependabot/go_modules/github.com/stretchr/testify-1.7.5 
Bump github.com/stretchr/testify from 1.7.2 to 1.7.5
 2022-06-24 16:25:04 -07:00
dependabot[bot] 55b2ec8d5d Bump github.com/stretchr/testify from 1.7.2 to 1.7.5 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.2 to 1.7.5.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.7.2...v1.7.5)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2022-06-24 02:11:25 +00:00
Alberto Santos 8772a7a649 Update go command to install certigo (#270) 2022-06-17 12:11:04 -07:00