follow-go

Documentation

Overview

package main provides a simple CT log follower that is looking for substrings in the SANs of (pre)certificates. All matches are saved as <index>.pem.

Install:

$ go build -o log-follow
$ mv log-follow $GOPATH/bin/

Examples where the first entry will be a (pre)certificate match:

$ log-follow --index 734604796
$ log-follow --index 734605273

Example starting from a prior run:

$ log-follow --index $(cat index.end)

The above uses default values, see --help for all options. The following list of known logs may be helpful to try following a different CT log:

https://github.com/google/certificate-transparency-community-site/blob/master/docs/google/known-logs.md

Warnings:

• This is a first take on a prototype, use with caution.
• Inclusion and consistency proofs are not checked.
• Signatures of found (pre)certificates are not checked.