ctloglists

ctloglists

Tracker for CT Log Lists and logs' Accepted Roots

Features

• Bundles and parses the following CT Log Lists:

  • For Server Authentication Certificates:
    • Chrome all_logs_list.json
    • Apple current_log_list.json
    • Mozilla Known CT Logs
  • For Mark Certificates:
    • BIMIGroup Approved CT Logs (see Appendix F).
  • Also:
    • crt.sh logs.json?include=all
    • Chrome "log mimics"

• Bundles and parses logs' Accepted Roots.

• Automated handling of Log List updates and Accepted Roots updates, via GitHub Actions.

Versioning

The latest Log Lists and Accepted Roots are fetched hourly by a GitHub Action. Any changes are automatically committed. If one or more Log Lists have been updated, a Release is tagged using a Scalable Calendar Versioning format (v1.YYYYMMDD.HHMMSS).

Used by

• ctlint: CT compliance linter.
• ctsubmit: CT submission proxy.