Adds SCT embedding to the certificate issuance flow. When a issuance is requested a precertificate (the requested certificate but poisoned with the critical CT extension) is issued and submitted to the required CT logs. Once the SCTs for the precertificate have been collected a new certificate is issued with the poison extension replace with a SCT list extension containing the retrieved SCTs. Fixes #2244, fixes #3492 and fixes #3429. |
||
|---|---|---|
| .. | ||
| main.go | ||
| main_test.go | ||
| test-cert-b.pem | ||
| test-cert.pem | ||