laurivosandi/certidude

Auditing script

Opened this issue · 0 comments

laurivosandi commented

Currently activities at CA leave trace in:

  • Mailbox at a separate machine
  • System logs
  • SQL logs possibly at a separate machine
  • Signed, revoked folders at server
  • CRL at server

Auditing tool would have to fetch all the bits and pieces and verify that data hasn't been tampered with.