Introducing TesseraCT static logs: Lipase and Halloumi

[Pim van Pelt]

Hoi colleagues,

I’m uncomfortably excited to announce the second of two Static Certificate Transparency logs, operated by IPng Networks in Switzerland. 
With many thanks to Al Cutter, Martin Hutchinson, Philippe Boneff and the Google trustfabric team, we are now ready to launch a TesseraCT log: 

• A staging log called [Lipase], incepted 2025-08-22, starting from temporal shared lipase2025h2.
• A production log called [Halloumi], incepted 2025-08-24, starting from temporal shared halloumi2025h2.

Lipase is a test log using 'testing' ccadbroots, and we cordially invite operators to test it. Andrew, Luke and Joe, thanks in advance for taking a look!
Halloumi is to be our production log, which we will be submitting for inclusion in the approved log lists for Google and Apple after initial testing and validation of Lipase.
A note on roots: We're waiting on TesseraCT #212 and until then we'll periodically pull roots from our Sunlight lots (Rennet for testing, Gouda for production). 

Lipase and Halloumi are hosted on a Dell R640 hypervisor with ZFS on SAS3 storage, at NTT in Rümlang (near Zürich) Switzerland. They are running TesseraCT POSIX Alpha release. 
We've allocated 16GB of ECC memory and 12 vCPU to the virtual machine to start with. We've put our VMs in a private network, front-ended by a set of NGINX servers across Europe. You can reach us at <ct-...@ipng.ch> and the Transparency Dev slack.

We have previously submitted our Sunlight logs to Chromium and Apple for inclusion, and we'll also file for inclusion for these logs after a quick check from the community. I am aware that there are not many TesseraCT / POSIX logs out there (we may be the first one!) so a bit of extra caution will be taken.

groet,
Pim, Jeroen and Antonis

-- 
Pim van Pelt <p...@ipng.ch>
PBVP1-RIPE https://ipng.ch/