Skip to content

Sunlight v0.7.0

Latest

Choose a tag to compare

@FiloSottile FiloSottile released this 14 Jan 13:57

Client

The Client can now fetch from local (with ClientConfig.MonitoringPrefix prefix file:// or gzip+file://) or archived logs (with ClientConfig.MonitoringPrefix prefix archive+file://).

The new ClientConfig.AllowRFC6962ArchivalLeafs, LogEntry.RFC6962ArchivalLeaf, and ReadTileLeafMaybeArchival fields and function support parsing RFC 6962 logs archived as static CT logs.

The new (*Client).Entry method fetches a single log entry by index.

The new (*Client).TileReader method returns a torchwood.TileReader interface, which has ReadTiles and ReadEndpoint methods.

(*Client).Fetcher is now deprecated and returns a torchwood.TileReader interface like (*Client).TileReader. This interface has the same methods as Fetcher, so most code should work unchanged.

Sunlight API

NewRFC6962InjectedSigner creates a note.Signer that injects a precomputed static CT log signature.

RFC6962Verifier now checks the origin line in the signed note body.

RFC6962Verifier now works with RSA keys.

Sunlight

Logs now stop accepting submissions a week after the NotAfterLimit.

The log.v3.json metadata now includes more information, including the final checkpoint.

CCADB roots and log lists are now fetched at startup concurrently.

Witness mode

The previously experimental tlog-witness mode is now stable and supports witness-network.org log lists.

Skylight

Skylight now serves a list of logs at /logs.json.

429 responses no longer include Content-Encoding and Cache-Control headers, to avoid caching errors.