mirror of
https://github.com/SSLMate/certspotter.git
synced 2025-07-01 10:35:33 +02:00
0af0262498
1. Instead of storing a single STH per log, we now store one verified STH and any number of unverified STHs. When we process a log, we verify each unverified STH using a consistency proof with the verified STH, and only delete it if it successfully verifies. We set the verified STH to the largest STH which we've successfully verified. This has two important benefits. First, we never ever delete an STH unless we can successfully verify it (previously, we would forget about an STH under certain error conditions). Second, it lays the groundwork for STH pollination. Upon reception of an STH, we can simply drop it in the log's unverified_sths directory (assuming the signature is valid), and Cert Spotter will audit it. There is no more "evidence" directory; if a consistency proof fails, the STHs will already be present elsewhere in the state directory. 2. We now persist a MerkleTreeBuilder between each run of Cert Spotter, instead of rebuilding it every time from the consistency proof. This is not intrinsically better, but it makes the code simpler considering we can now fetch numerous consistency proofs per run. 3. To accommodate the above changes, the state directory has a brand new layout. The state directory is now versioned, and Cert Spotter will automatically migrate old state directories to the new layout. This migration logic will be removed in a future Cert Spotter release. As a bonus, the code is generally cleaner now :-)
88 lines
1.9 KiB
Go
88 lines
1.9 KiB
Go
// Copyright (C) 2017 Opsmate, Inc.
|
|
//
|
|
// This Source Code Form is subject to the terms of the Mozilla
|
|
// Public License, v. 2.0. If a copy of the MPL was not distributed
|
|
// with this file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
//
|
|
// This software is distributed WITHOUT A WARRANTY OF ANY KIND.
|
|
// See the Mozilla Public License for details.
|
|
|
|
package cmd
|
|
|
|
import (
|
|
"crypto/sha256"
|
|
"encoding/hex"
|
|
"encoding/json"
|
|
"io/ioutil"
|
|
"os"
|
|
|
|
"software.sslmate.com/src/certspotter/ct"
|
|
)
|
|
|
|
func fileExists(path string) bool {
|
|
_, err := os.Lstat(path)
|
|
return err == nil
|
|
}
|
|
|
|
func writeFile(filename string, data []byte, perm os.FileMode) error {
|
|
tempname := filename + ".new"
|
|
if err := ioutil.WriteFile(tempname, data, perm); err != nil {
|
|
return err
|
|
}
|
|
if err := os.Rename(tempname, filename); err != nil {
|
|
os.Remove(tempname)
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func writeJSONFile(filename string, obj interface{}, perm os.FileMode) error {
|
|
tempname := filename + ".new"
|
|
f, err := os.OpenFile(tempname, os.O_WRONLY|os.O_CREATE|os.O_TRUNC, perm)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err := json.NewEncoder(f).Encode(obj); err != nil {
|
|
f.Close()
|
|
os.Remove(tempname)
|
|
return err
|
|
}
|
|
if err := f.Close(); err != nil {
|
|
os.Remove(tempname)
|
|
return err
|
|
}
|
|
if err := os.Rename(tempname, filename); err != nil {
|
|
os.Remove(tempname)
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func readJSONFile(filename string, obj interface{}) error {
|
|
bytes, err := ioutil.ReadFile(filename)
|
|
if err != nil {
|
|
return err
|
|
}
|
|
if err = json.Unmarshal(bytes, obj); err != nil {
|
|
return err
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func readSTHFile(filename string) (*ct.SignedTreeHead, error) {
|
|
sth := new(ct.SignedTreeHead)
|
|
if err := readJSONFile(filename, sth); err != nil {
|
|
return nil, err
|
|
}
|
|
return sth, nil
|
|
}
|
|
|
|
func sha256sum(data []byte) []byte {
|
|
sum := sha256.Sum256(data)
|
|
return sum[:]
|
|
}
|
|
|
|
func sha256hex(data []byte) string {
|
|
return hex.EncodeToString(sha256sum(data))
|
|
}
|