ShakeSpears / crlset-tools

Tools for dealing with Chrome's CRLSets

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

CRL Set Tools

crlset is a utility program for downloading and dumping the current Chrome CRLSet. It can be built with Go1. See http://golang.org/doc/install.html, but don't pass "-u release" when fetching the repository.

One you have Go installed, run:

% go build crlset.go

First you need to download the current CRL set:

% ./crlset fetch > crl-set
Downloading CRLSet version 59

Then you can dump everything in the CRL set:

% ./crlset dump crl-set

Revocations are grouped by the SHA-256 hash of the issuing certificate's SubjectPublicKeyInfo and listed as serial numbers.

You can also list only the serials issued under a given certificate:

% ./crlset dump crl-set my-ca-cert.pem

About

Tools for dealing with Chrome's CRLSets


Languages

Language:Go 100.0%