New Google test logs based on Trillian

277 views
Skip to first unread message

Paul Hadfield

unread,
Jul 20, 2018, 7:29:40 AM7/20/18
to certificate-transparency
Hi certificate-transparency,

On behalf of the Google CT team I'm pleased to announce some new test CT logs that we have recently launched.  The logs are ready for immediate and free use, for testing only.


* Crucible

Crucible is a single-shard, Trillian-based test log.  It accepts submissions that chain to any of the roots that are acceptable to Testtube.  For CAs who currently test using Testtube, Crucible can be a direct drop-in replacement.

LogID: w78Dp+HKiEHGB7rj/0Jw/KXsRbGG675OLPP8d4Yw9fY=

Crucible's public key is attached.


* Solera

Solera is a temporally-sharded, Trillian-based test log set.  The log shards accept submissions that chain to any of the roots that are acceptable to Testtube.  In addition, the shards validate certificate expiry dates and will reject any submission that falls outside their defined time window.
Solera's sharding is configured in the same way as Argon and Xenon.

LogID: UutLIl7IlpdIUGdfI+Q7wdAh4yFM5S7NX6h8IDzfygM=
Expiry range: Jan 01 2018 00:00:00Z inclusive to Jan 01 2019 00:00:00Z exclusive

LogID:  C3YOmouaaC+ImFsV6UdQGlZEa7qIMHhcOEKZQ4ZFDAA=
Expiry range: Jan 01 2019 00:00:00Z inclusive to Jan 01 2020 00:00:00Z exclusive

LogID: H8cs5aG3mfQAw1m/+WyjkTVI6GRCIGEJUum6F3T3usc=
Expiry range: Jan 01 2020 00:00:00Z inclusive to Jan 01 2021 00:00:00Z exclusive

LogID: o8mYRegKt84AFXs3Qt8CB90nKytgLs+Y7iwS25xa5+c=
Expiry range: Jan 01 2021 00:00:00Z inclusive to Jan 01 2022 00:00:00Z exclusive

LogID: aXqvyhprU2+uISBQRt661+Dq6hPSQy5unY+zefK5qvM=
Expiry range: Jan 01 2022 00:00:00Z inclusive to Jan 01 2023 00:00:00Z exclusive

Solera public keys are attached.


* Root requests

Please continue to send requests for test root certificate inclusion to: google-...@googlegroups.com following the process detailed on https://www.certificate-transparency.org/known-logs

Test roots we accept will be added to Testtube, Crucible and all Solera shards.


* Future work

New Solera shards will be turned up as required.

Testtube remains available for now.  At some point we will withdraw it, but no date for that is currently planned. An announcement will be made when the time comes!


Please report any issues to google-...@googlegroups.com

On behalf of the Google CT Team,

- Paul Hadfield

google-crucible-public-key.pem
google-solera2021-public-key.pem
google-solera2022-public-key.pem
google-solera2019-public-key.pem
google-solera2020-public-key.pem
google-solera2018-public-key.pem

Tomas Gustavsson

unread,
Aug 2, 2018, 10:41:49 AM8/2/18
to certificate-...@googlegroups.com
Great! Thanks for the new test servers. 
I configured them in EJBCA and made a quick test and it's working nicely. 

Cheers,
Tomas


--
You received this message because you are subscribed to the Google Groups "certificate-transparency" group.
To unsubscribe from this group and stop receiving emails from it, send an email to certificate-transp...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/certificate-transparency/CAGDCdM67Z9UFwy%2BNzBiYLmXe%2BTVh3-Ldb9RKZUzZX7h9CHTnEQ%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.

Paul Hadfield

unread,
Aug 2, 2018, 10:49:52 AM8/2/18
to certificate-transparency
Hi Tomas,

good to hear that!  Thanks :)

cheers,
Paul


For more options, visit https://groups.google.com/d/optout.


--
I work a reduced week, from Weds-Fri; messages sent on Mon/Tue will have a delayed response.
Reply all
Reply to author
Forward
0 new messages