Recent change in log list v3 broke log list parsing in popular Android library

[Tevin Jeffrey]

https://github.com/appmattus/certificatetransparency/issues/143

[Alex Benoit]

the addition of:

      "name": "Geomys", "email": [ "c...@geomys.org" ], "logs": [],

with an empty array has broken appmattus/certificatetransparency

is it possible to revert temporarily?

On Saturday, June 21, 2025 at 9:43:51 AM UTC-7 Tevin Jeffrey wrote:

https://github.com/appmattus/certificatetransparency/issues/143

[Manjul Kadyan]

we’re seeing the same issue. Our Android app is currently down due to the log list parsing failure in the certificatetransparency library.

[Cristi Constantin]

We're experiencing the same issue.

This requires an urgent fix.

[Walter Huang]

We're experiencing the same issue now, need to apply hotfix to disable the library first, please help to fix it. 

--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/certificate-transparency/2001bf9d-f007-477b-ac80-5b165321a77dn%40googlegroups.com.

[Roger Ng]

The v3 log list version 57.1 was rolled out to add a fake log to the applicable logs array. This should stop the breakage.

https://www.gstatic.com/ct/log_list/v3/log_list.json
https://www.gstatic.com/ct/log_list/v3/all_logs_list.json

Note that this is only a temporary solution. Please read #143 (comment) for details.

Cheers,

Roger

[Naseer Ahmed]

To view this discussion visit https://groups.google.com/d/msgid/certificate-transparency/72870b9d-67cb-48cd-9064-04f10dfbd46fn%40googlegroups.com.

[Joe DeBlasio]

Hi folks,

Just to reiterate a version of what I said on the GitHub issue, the "appmattus/certificatetransparency" is now using the Chrome CT Log List in violation of its Acceptable Use Policy. If you continue to rely on this library, you do so at their own risk, especially since the library is not adequately maintained.  Future changes to the list will very likely result in breakage of apps using the library, and Google may not mitigate that breakage. Google strongly recommends discontinuing use of this library, instead relying on upcoming CT support in Android 16, and unfortunately not enforcing CT for Android users prior to Android 16.

Best,

Joe, on behalf of the Chrome CT Team

To view this discussion visit https://groups.google.com/d/msgid/certificate-transparency/CA%2BbGJhyFjPe%2BtAYsdvs%2BfFHYcGqLcLRkHaKqoKqx874aopQjxQ%40mail.gmail.com.