ctclient 0.4.5

Certificate Transparency Log client suitable for monitoring, quick SCT validation, gossiping, etc.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

use ctclient::{CTClient, certutils};
use openssl::x509::X509;
use std::io::Write;

fn main() {
  env_logger::init();

  if std::env::args_os().len() != 1 {
    eprintln!("Expected no arguments.");
    std::process::exit(1);
  }

  // URL and public key copy-pasted from https://www.gstatic.com/ct/log_list/v2/all_logs_list.json .
  // Google's CT log updates very quickly so we use it here.
  let public_key = base64::decode("MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6Tx2p1yKY4015NyIYvdrk36es0uAc1zA4PQ+TGRY+3ZjUTIYY9Wyu+3q/147JG4vNVKLtDWarZwVqGkg6lAYzA==").unwrap();
  const URL: &str = "https://ct.googleapis.com/logs/argon2020/";
  let mut client = CTClient::new_from_latest_th(URL, &public_key).unwrap();
  loop {
    let update_result = client.update(Some(|certs: &[X509]| {
      let leaf = &certs[0];
      let ca = &certs[1];
      let canames = certutils::get_common_names(ca).unwrap();
      let caname = &canames[0];
      if let Ok(domains) = certutils::get_dns_names(leaf) {
        print!("{}: ", caname);
        let mut first = true;
        for d in domains.into_iter() {
          if !first {
            print!(", ");
          }
          print!("{}", d);
          first = false;
        }
        print!("\n");
      }
    }));
    if update_result.is_err() {
      eprintln!("Error: {}", update_result.unwrap_err());
    }
    std::io::stdout().flush().unwrap();
  }
}