Pim van Pelt
e18a89dcf0
Introduces a static-binary build and Debian package (amd64/arm64) with version/commit/date stamped via -ldflags. Ships section-1 manpages for ctool, ctfetch, and ctail. Adds a `version` subcommand reachable as `ctool version`, `ctool -version`, `ctool --version`, `ctool fetch version`, `ctool tail version`, and via the ctfetch/ctail symlinks. Adds tests covering the dispatcher, fetch/tail argument parsing, and the formatter/helper functions. Adds a retrofit design document modelled on the vpp-maglev one, with FRs and NFRs for each tool and the dispatcher. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
Certificate Transparency tools
Tools for working with Static CT log tiles.
Install
GOPRIVATE=git.ipng.ch go install git.ipng.ch/certificate-transparency/ctfetch/cmd/ctool@latest
The GOPRIVATE variable skips the Go checksum database and module proxy, which do not index modules on git.ipng.ch.
Commands
ctool fetch
Fetch and decode entries from a Static CT log as structured JSON.
ctool fetch https://halloumi2026h1.mon.ct.ipng.ch 1338427439 +all
ctool tail
Tail a Static CT log, printing a one-liner per new cert/precert as it arrives.
ctool tail https://gouda2026h2.mon.ct.ipng.ch