9c9e944759
Adds SCT embedding to the certificate issuance flow. When a issuance is requested a precertificate (the requested certificate but poisoned with the critical CT extension) is issued and submitted to the required CT logs. Once the SCTs for the precertificate have been collected a new certificate is issued with the poison extension replace with a SCT list extension containing the retrieved SCTs. Fixes #2244, fixes #3492 and fixes #3429. |
||
|---|---|---|
| .. | ||
| config | ||
| proto | ||
| testdata | ||
| ca.go | ||
| ca_test.go | ||