Package-level declarations

Types

Link copied to clipboard
data class DigitallySigned(val hashAlgorithm: HashAlgorithm, val signatureAlgorithm: SignatureAlgorithm, val signature: ByteArray)

Represents a digitally-signed struct as defined in RFC 5246 §4.7 and used by RFC 6962.

Link copied to clipboard

Hash algorithm identifiers as defined in the TLS HashAlgorithm registry (RFC 5246 §7.4.1.4.1).

Link copied to clipboard
data class LogId(val keyId: ByteArray)

Represents a CT Log ID — the SHA-256 hash of the log's public key (32 bytes).

Link copied to clipboard
data class LogOperator(val name: String, val logs: List<LogServer>)

Represents a Certificate Transparency log operator (e.g., Google, Cloudflare, DigiCert).

Link copied to clipboard
data class LogServer(val logId: LogId, val publicKey: ByteArray, val operator: String, val url: String, val state: LogState, val temporalInterval: TemporalInterval?)

Represents a single Certificate Transparency log server from the CT log list.

Link copied to clipboard

Lifecycle state of a Certificate Transparency log server as published in the Google CT Log List V3.

Link copied to clipboard
enum Origin : Enum<Origin>

Describes how a SignedCertificateTimestamp was delivered to the TLS client.

Link copied to clipboard

Result of verifying a single SignedCertificateTimestamp against a log server's public key.

Link copied to clipboard

Version of the Signed Certificate Timestamp (SCT) structure as defined in RFC 6962.

Link copied to clipboard

Signature algorithm identifiers as defined in the TLS SignatureAlgorithm registry (RFC 5246 §7.4.1.4.1).

Link copied to clipboard
data class SignedCertificateTimestamp(val version: SctVersion, val logId: LogId, val timestamp: Instant, val extensions: ByteArray, val signature: DigitallySigned, val origin: Origin)

A Signed Certificate Timestamp (SCT) as defined in RFC 6962 §3.2.

Link copied to clipboard
data class TemporalInterval(val startInclusive: Instant, val endExclusive: Instant)

Defines the time range during which a CT log accepts certificates.

Link copied to clipboard
sealed class VerificationResult

Result of a Certificate Transparency verification for a TLS connection.