veil

Read witness cosignatures

Read each configured witness’s latest stored cosignature.

GET/{log}/witnesses
Access
Public access
Client
Browser fetch supported

Parameters#

NameLocationMeaning
logRequiredPathThe log name identified by /v1/log, such as staging-1.

Request examples#

cURL
curl -fsS 'https://log.veil.rip/staging-1/witnesses'

Response#

HTTP 200application/json

JSON with origin, quorum and witnesses. Different witnesses may have signed different tree sizes.

FieldTypeMeaning
originstringLog origin.
quorumintegerRequired witness count.
witnessesarray<LogWitness>Per-witness signed checkpoint information. Validate against the policy and signed notes.

Expand a nested object for its fields. Types ending in null allow a null value; optional fields may be absent. Other fields are present in that object.

Log witness LogWitness
FieldTypeMeaning
namestringWitness key name.
vkeystringSigned-note verifier key.
urlstringWitness service URL.
sizeintegerMost recently cosigned tree size; witnesses can lag behind each other.
checkpointstringSigned checkpoint associated with this witness.
cosignaturestringWitness cosignature. Check it against the policy.
seenstringTime the log last observed this witness response.

Response headers#

HeaderValueMeaning
Content-Typeapplication/jsonUse the declared media type before choosing a parser.

What to verify#

Verify each cosignature against the expected witness key and the checkpoint it signed.

Errors#

The log host serves its own text or binary protocol. Missing resources can return HTTP 404; do not assume a directory JSON error envelope. Response and error guide