Ask: standalone application to pull specific ID from specific CS log

[ALange]

A little request that may help to debug exceptions & integrations with cs-go. @d-Rickyy-b is there a chance that you can build / add console application that gets ID and CS log url to pull & parse & print on screen parsed certificate compatible with the message that websocket is sending to client ? Sometimes we need to revert back with ID and pull some old data for testing :)

Thanks!

[d-Rickyy-b]

Hey there, thanks for creating an issue. I didn't fully understand your request. Can you be a bit more specific with what exactly you need? Are you talking about a console application to connect to the certstream server that simply prints the received certificates?

[ALange]

Yes exactly that :) but with this feature that it will reach to get only one cert from only one CS log. Something like:

main.go [id] [log url]

This may help debug and get the just one cert and reach for historical data with this. Like a helper tool :)

[d-Rickyy-b]

I implemented a small tool for exactly that. The output is either a json object as if it came from the certstream server or it is an error message. For now I kept it as a different CLI tool and didn't include it in the main certstream-server-go binary. Also I won't add precompiled binaries to the github releases.

But, of course, you can build the tool yourself like so:

go build ./cmd/certpicker/

After you built it, you have the following CLI arguments.

Usage of certpicker:
  -asder
        Include DER encoding of the certificate
  -cert int
        ID of the certificate to fetch from the CT log
  -chain
        Include full chain for the certificate
  -log string
        URL of the CT log - e.g. ct.googleapis.com/logs/eu1/xenon2025h2

So for example:

certpicker -log ct.googleapis.com/logs/eu1/xenon2025h2 -cert 150432

Hope this helps!