# OneCRL-Tools

**Repository Path**: mirrors_mozilla/OneCRL-Tools

## Basic Information

- **Project Name**: OneCRL-Tools
- **Description**: Some tools for supporting OneCRL
- **Primary Language**: Unknown
- **License**: MPL-2.0
- **Default Branch**: main
- **Homepage**: None
- **GVP Project**: No

## Statistics

- **Stars**: 0
- **Forks**: 0
- **Created**: 2020-08-22
- **Last Updated**: 2026-03-29

## Categories & Tags

**Categories**: Uncategorized

**Tags**: None

## README

# OneCRL-Tools

Some tools for supporting OneCRL.

Below is a description of each folder in this repository.

## bugzilla

**Status:** In use

**Description:** Defines API for interacting with Bugzilla.

**Usage:** See ccadb2OneCRL/main.go

**Used By:** ccadb2OneCRL

## ccadb2OneCRL

**Status:** In use

**Description:** Automates much of the process for taking reported/verified revocation data from the CCADB and adding it to OneCRL.

**Usage:** See the README in https://github.com/mozilla/OneCRL-Tools/tree/main/ccadb2OneCRL

**Used By:** Security Engineers and Cloud Services

## cert-storage-inspector

**Status:** In use

**Description:** Compares the OneCRL data in a given Firefox profile against 
 the OneCRL data in [DEFAULT_ONECRL_URL](https://firefox.settings.services.mozilla.com/v1/buckets/security-state/collections/onecrl/records).

**Usage:** See the README in https://github.com/mozilla/OneCRL-Tools/tree/main/cert-storage-inspector

**Used By:** CA Program Managers

## containers

**Status:** In use

**Description:**  This is how ccadb2OneCRL gets deployed

**Usage:** See the README in https://github.com/mozilla/OneCRL-Tools/tree/main/containers

**Used By:** Security Engineers and Cloud Services

## decodeEntries

**Status:** In use

**Description:** Converts OneCRL entry data from hexadecimal serials/hashes to non-encoded human-readable format.

**Usage:** See the README in https://github.com/mozilla/OneCRL-Tools/tree/main/decodeEntries

**Used By:** CA Program Managers

## entryMaker

**Status:** In use

**Description:** Given a certificate, output the corresponding data that can be added to OneCRL.

**Usage:** See the README in https://github.com/mozilla/OneCRL-Tools/tree/main/entryMaker

**Used By:** Security Engineers and Cloud Services

## kinto

**Status:** In use

**Description:** Defines API for interacting with Kinto.

**Usage:** See ccadb2OneCRL/main.go

**Used By:** ccadb2OneCRL

## tools/Salesforce2OneCRL-scheduler

**Status:** ???

**Description:** This is an AWS Lambda to perform scheduled OneCRL updates from the CCADB.

**Usage:** See README in https://github.com/mozilla/OneCRL-Tools/tree/main/tools/Salesforce2OneCRL-scheduler

**Used By:** ???

## transaction

**Status:** In Use

**Description:** Each step in the transaction holds a rollback procedure in the event of a downstream failure. For example, if putting staging into review fails, then Bugzilla ticket will be closed as `INVALID` with a stacktrace attached and all entries that were pushed to staging will be deleted.

**Usage:** See ccadb2OneCRL/main.go

**Used By:** ccadb2OneCRL