Go support for SCTs in OCSP?

[Jacob Hoffman-Andrews]

Hi all,

For Boulder, the Go software that will run the Let's Encrypt CA, we're
starting work on logs submission code:
https://github.com/letsencrypt/boulder/pull/454. We'd like to also be
able to embed SCTs in the OCSP responses we provide, but we found that
Go's OCSP library doesn't yet support x509v3 extensions in OCSP
responses (https://godoc.org/golang.org/x/crypto/ocsp). Does anyone on
this list have working Go code to embed SCTs in OCSP that we could work
off of?

Thanks,
Jacob

[Asad Mehmood]

I've written a small package [1] which creates an OCSP extension given a list of SCTS

This obviously requires a x/crypto/ocsp to add support for a method to add OCSP Extensions

[1] https://github.com/mehmooda/sct