-
Notifications
You must be signed in to change notification settings - Fork 70
Add zlint support #286
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add zlint support #286
Conversation
lib/encoder.go
Outdated
| warnings = append(warnings, "Public key exponent in RSA key is less than 3") | ||
| lintRegistryOnce.Do(func() { | ||
| registry, err := lint.GlobalRegistry().Filter(lint.FilterOptions{ | ||
| IncludeSources: []lint.LintSource{lint.RFC5280, lint.CABFBaselineRequirements, lint.Community}, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sorry to be a pain, but let's leave off the CAB BR ones in this PR. For our private PKI, these don't make sense. A good improvement would be to take the sources via a flag, maybe. (Not in this PR)
jdtw
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just one minor comment about keeping backwards compatibility in the public struct.
Update cert warnings to use zlint with lint sources from RFC5280, CA/Browser Forum Baseline Requirements, and the zlint community.