Andrew Ayer comments

Results 106 comments of


                                            Andrew Ayer

certspotter should be a daemon

Thanks, @paravoid. Those are good points and have helped me understand the full value of `-script`. My main concern with `-script` is making sure it's used safely. The nice thing...

Write a man page

Thank you @paravoid ! I took a look at the certspotter man page in 0.14.0-1, and it looks great. I will be importing it and augmenting it with additional detail....

A data structure like this might be useful: ```go type DiscontiguousCollapsedTree []CollapsedTreeSegment type CollapsedTreeSegment struct { Index uint64 Tree CollapsedTree } func (t *DiscontiguousCollapsedTree) Add(index uint64, tree CollapsedTree) { maxSize...

Search pattern in -script

As of v0.15.0, certspotter sets `$WATCH_ITEM` containing the first item from the watch list which matched the certificate.

git-crypt can't handle utf-8

Yes, `get_file_attributes` should indeed be passing the `-z` option. Good catch! @Crims-on - if you could create a repo on GitHub containing the problematic filenames so that I can reproduce...

Cannot add friendly name to certificate properties?

Tracking this feature request in #34.

Customize FriendlyName for Export?

Tracking this feature request in #34.

Feature to extract all certificates and private keys from pfxData.

Reading through the linked issues, it sounds like all of the problems were caused by people using `Decode` when they should have been using `DecodeChain`, or by making a mistake...

Support triple DES certificate encryption

Closing in favor of #48

Address a bunch of Issue, and fix a missing `asn1:optional` flag, add a Config for setting options, and Marshal/Unmarshal

Thanks @pschou for your PR. Unfortunately, this PR is extremely large and changes a lot of security-sensitive code and API surface and I just don't have the time to review...