mirror of
https://github.com/SSLMate/certspotter.git
synced 2025-12-18 12:54:18 +01:00
74 lines
2.1 KiB
Go
74 lines
2.1 KiB
Go
// Copyright (C) 2025 Opsmate, Inc.
|
|
//
|
|
// This Source Code Form is subject to the terms of the Mozilla
|
|
// Public License, v. 2.0. If a copy of the MPL was not distributed
|
|
// with this file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
//
|
|
// This software is distributed WITHOUT A WARRANTY OF ANY KIND.
|
|
// See the Mozilla Public License for details.
|
|
|
|
package cttypes
|
|
|
|
import (
|
|
"fmt"
|
|
"golang.org/x/crypto/cryptobyte"
|
|
"software.sslmate.com/src/certspotter/tlstypes"
|
|
)
|
|
|
|
type SignedCertificateTimestamp struct {
|
|
SCTVersion Version `json:"sct_version"`
|
|
ID LogID `json:"id"`
|
|
Timestamp uint64 `json:"timestamp"`
|
|
Extensions CTExtensions `json:"extensions"`
|
|
Signature tlstypes.DigitallySigned `json:"signature"`
|
|
}
|
|
|
|
func (sct *SignedCertificateTimestamp) Bytes() ([]byte, error) {
|
|
var builder cryptobyte.Builder
|
|
builder.AddValue(sct)
|
|
return builder.Bytes()
|
|
}
|
|
|
|
func (sct *SignedCertificateTimestamp) Marshal(b *cryptobyte.Builder) error {
|
|
b.AddValue(sct.SCTVersion)
|
|
b.AddValue(sct.ID)
|
|
b.AddUint64(sct.Timestamp)
|
|
b.AddValue(sct.Extensions)
|
|
b.AddValue(sct.Signature)
|
|
return nil
|
|
}
|
|
|
|
func (sct *SignedCertificateTimestamp) Unmarshal(s *cryptobyte.String) error {
|
|
if !sct.SCTVersion.Unmarshal(s) {
|
|
return fmt.Errorf("error reading SCT version")
|
|
}
|
|
if sct.SCTVersion != V1 {
|
|
return fmt.Errorf("unsupported SCT version 0x%02x", sct.SCTVersion)
|
|
}
|
|
if !sct.ID.Unmarshal(s) {
|
|
return fmt.Errorf("error reading SCT id")
|
|
}
|
|
if !s.ReadUint64(&sct.Timestamp) {
|
|
return fmt.Errorf("error reading SCT timestamp")
|
|
}
|
|
if !sct.Extensions.Unmarshal(s) {
|
|
return fmt.Errorf("error reading SCT extensions")
|
|
}
|
|
if !sct.Signature.Unmarshal(s) {
|
|
return fmt.Errorf("error reading SCT signature")
|
|
}
|
|
return nil
|
|
}
|
|
|
|
func ParseSignedCertificateTimestamp(data []byte) (*SignedCertificateTimestamp, error) {
|
|
str := cryptobyte.String(data)
|
|
sct := new(SignedCertificateTimestamp)
|
|
if err := sct.Unmarshal(&str); err != nil {
|
|
return nil, err
|
|
}
|
|
if !str.Empty() {
|
|
return nil, fmt.Errorf("trailing garbage after SignedCertificateTimestamp")
|
|
}
|
|
return sct, nil
|
|
}
|