Certificate Notary

Perspectives-compatible SSL/TLS Certificate Notary

Features

• SHA256 support (with &x-fp=sha256)
• Stores certificates on scanning
• Efficient Validation on Conditional GETs
• Web server and scanner in a single process

Own server setup

# Install Postgres 9.2+, Ruby 2.2+ and the foreman gem
git clone https://github.com/stupidpupil/certificate_notary.git
cd certificate_notary
bundle install --without testing
sudo -u postgres createuser mynotaryuser
sudo -u postgres createdb -O mynotaryuser certificate_notary_production
echo "RACK_ENV=production" >> .env
echo "NOTARY_PRIVATE_KEY=`foreman run rake generate_private_key`" >> .env
foreman start web

Heroku setup

git clone https://github.com/stupidpupil/certificate_notary.git
cd certificate_notary
bundle install --without testing
heroku create
heroku config:add NOTARY_PRIVATE_KEY=`rake generate_private_key`
heroku addons:add heroku-postgresql:hobby-dev
git push heroku

Copying

The Ruby Certificate Notary is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.