New issue
Advanced search Search tips

Issue 839612 link

Starred by 3 users

Issue metadata

Status: Available
Owner: ----
Cc:
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 3
Type: Task



Sign in to add a comment

Make Certificate Transparency end-to-end testing easier

Project Member Reported by rsleevi@chromium.org, May 3 2018

Issue description

Currently, testing certificate transparency as part of an end-to-end test requires configuring real logs and real certs, in such a way as to comply with whatever the current CT policies are in the tree. By virtue of needing to use real logs, inclusion testing also requires real STHs and real proofs.

To make it easier to maintain and understand the code, we may wish to explore either making it easier to use test-only logs (so that new and/or invalid answers can be generated on demand, as tests need), or to extract the necessary information from 'real' logs as appropriate.
 
Note that one of the challenges with using test-only logs is that the CT Policy also has to either know about the test logs (e.g. to simulate qualified, disqualified, and Google-run logs) or has to be able to override policy. The former is likely easier and more future-proof than the latter.

Sign in to add a comment