1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
|
# Certificate Transparency (CT)
This directory contains the implementation of the CT log list and Chrome's CT
policy enforcement.
The policy enforcement implementation here builds on the interfaces defined in
`net::TransportSecurityState::RequireCTDelegate` and `net::CTPolicyEnforcer` to
implement Chrome's CT policy. See `ChromeRequireCTDelegate` and
`ChromeCTPolicyEnforcer` for implementation details, respectively.
The log list format is defined in `certificate_transparency.proto`, and Chrome’s
CT configuration format is defined in `certificate_transparency_config.proto`.
A built-in log list is included in `data/log_list.json`; updates to the log list
are delivered via component updater (via the
[“PKI Metadata” component](https://source.chromium.org/chromium/chromium/src/+/main:chrome/browser/component_updater/pki_metadata_component_installer.h;drc=288023bfb5c392e8b2643f2bd68ab86a67c1789a))
and take precedence over this built-in log list when available. The built-in
copy of the log list is updated via automated commits. The built-in log list is
compiled into a C++ source file by the script in
`tools/make_ct_known_logs_list.py`, via the action defined in `data/BUILD.gn`.
This component also contains various pref and feature definitions, and the C++
APIs used to interact with the log list.
For more information about Certificate Transparency, see
https://certificate.transparency.dev/. For more information about Chrome's
Certificate Transparency policies, see https://goo.gl/chrome/ct-policy and
https://goo.gl/chrome/ct-log-policy.
## Tests
Tests for `make_ct_known_logs_list.py` can be run manually via
`python3 make_ct_known_logs_list_unittest.py`.
|
