Add crl-checker, a simple tool which downloads, parses, lints, and validates signatures on a list of CRLs. It takes its input in the form of a JSON Array of Sharded CRL URLs, the exact same format as we will be disclosing in CCADB. We can add additional checks -- such as ensuring that a set of known-revoked serials are present, or checking that all of the downloaded CRLs are "recent enough" -- over time. |
||
|---|---|---|
| .. | ||
| lints | ||
| linter.go | ||
| linter_test.go | ||