README.markdown
1ct-submit
2=========
3
4Introduction
5------------
6
7`ct-submit` is a program that submits X.509 certificate chains to
8[Certificate Transparency][ct] log servers. It returns the Signed Certificate
9Timestamp structure in a format suitable for use with Apache's
10[mod\_ssl\_ct][apache] module and [nginx-ct][nginx].
11
12Building
13--------
14
15`ct-submit` is written in [Go][go]. Just run `go build` to build it.
16
17Usage
18-----
19
20`ct-submit` takes a single argument - the URL of the log server. If the scheme
21is not specified it defaults to `https://`. It reads the certificate chain in
22PEM format from `stdin`. The leaf certificate should be the first certificate
23in the chain, followed by any intermediate certificates and, optionally, the
24root certificate.
25
26The encoded SCT structure is written in binary to `stdout`.
27
28The following example demonstrates submitting the chain in `gpe.pem` to
29Google's pilot log server. The SCT is written to `gpe.sct`, which is in a format
30suitable for use with Apache's mod\_ssl\_ct module and nginx-ct.
31
32 $ ./ct-submit ct.googleapis.com/pilot <gpe.pem >gpe.sct
33 $ xxd gpe.sct
34 00000000: 00a4 b909 90b4 1858 1487 bb13 a2cc 6770 .......X......gp
35 00000010: 0a3c 3598 04f9 1bdf b8e3 77cd 0ec8 0ddc .<5.......w.....
36 00000020: 1000 0001 4bc7 e617 c800 0004 0300 4830 ....K.........H0
37 00000030: 4602 2100 b9fe e206 f0f5 f600 93d5 e04c F.!............L
38 00000040: d2fd 75c9 e1fc a5c8 4812 a8b7 bc2c eb0c ..u.....H....,..
39 00000050: ee16 1fe9 0221 008a 5974 e1b6 a0e0 281a .....!..Yt....(.
40 00000060: 61e8 3447 895f 7ad4 2f70 f528 6133 a445 a.4G._z./p.(a3.E
41 00000070: 4fd4 ab60 ba36 db O..`.6.
42 $
43
44License
45-------
46
47`ct-submit` is available under the terms of the ISC license, which is similar to
48the 2-clause BSD license. See the `LICENSE` file for the copyright information
49and licensing terms.
50
51[ct]: http://www.certificate-transparency.org/
52[apache]: https://httpd.apache.org/docs/trunk/mod/mod_ssl_ct.html
53[nginx]: https://github.com/grahamedgecombe/nginx-ct
54[go]: https://golang.org/
55