Examples of org.certificatetransparency.ctlog.LogSignatureVerifier.verifySignature()

org.certificatetransparency.ctlog.LogSignatureVerifier.verifySignature()

Verifies the CT Log's signature over the SCT and certificate. Works for the following cases: * Ordinary X509 certificate sent to the log. * PreCertificate signed by an ordinary CA certificate. * PreCertificate signed by a PreCertificate Signing Cert. In this case the PreCertificate signing certificate must be 2nd on the chain, the CA cert itself 3rd. It does not work for verifying a final certificate with the CT extension. TODO(eranm): Add the ability to remove the CT extension and verify a final certificate. @param sct SignedCertificateTimestamp received from the log. @param chain The certificates chain as sent to the log. @return true if the log's signature over this SCT can be verified, false otherwise.


    System.out.println("Canned SCT: " + sct.toString());


    LogInfo logInfo = LogInfo.fromKeyFile(logPublicKeyFile);
    LogSignatureVerifier verifier = new LogSignatureVerifier(logInfo);
    if (verifier.verifySignature(sct, certs)) {
      System.out.println("Signature verified OK.");
    } else {
      System.out.println("Signature verification FAILURE.");
      System.exit(-1);
    }

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.