jcjones / ct-sql Goto Github PK

The certificates table has an enormous index for notBefore and notAfter for the sake of culling the unexpired_certificates table, even for entries that are expired. Also, substantial maintenance time is spent scanning those indexes periodically to populate the unexpired_certificates table.

Definitely change ct-sql to insert relevant certificates into unexpired_certificates (PK to certificates) and consider also removing those large indexes from certificates. (But they're useful if you want to get historical data...)

go get github.com/jcjones/ct-sql/cmd/ct-sql fails with the following error, not sure if this is a global issue or something with my setup.

# github.com/jcjones/ct-sql/cmd/ct-sql
go/src/github.com/jcjones/ct-sql/cmd/ct-sql/main.go:84: not enough arguments in call to client.New
go/src/github.com/jcjones/ct-sql/cmd/ct-sql/main.go:84: multiple-value client.New() in single-value context

Currently need to use a MAX(logEntryID) query to figure out what to load from, for a given CT log. This could be a cache table that also includes a timestamp of the most recent connection, and most recent completion.