Skip to content

Conversation

@john-shieh
Copy link
Contributor

@john-shieh john-shieh commented Jul 25, 2022

Update cert warnings to use zlint with lint sources from RFC5280, CA/Browser Forum Baseline Requirements, and the zlint community.

@CLAassistant
Copy link

CLAassistant commented Jul 26, 2022

CLA assistant check
All committers have signed the CLA.

@john-shieh john-shieh marked this pull request as ready for review July 28, 2022 20:10
@john-shieh john-shieh requested review from a team, jdtw, lavanyaharinarayan and stfinney July 28, 2022 20:10
lib/encoder.go Outdated
warnings = append(warnings, "Public key exponent in RSA key is less than 3")
lintRegistryOnce.Do(func() {
registry, err := lint.GlobalRegistry().Filter(lint.FilterOptions{
IncludeSources: []lint.LintSource{lint.RFC5280, lint.CABFBaselineRequirements, lint.Community},
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry to be a pain, but let's leave off the CAB BR ones in this PR. For our private PKI, these don't make sense. A good improvement would be to take the sources via a flag, maybe. (Not in this PR)

Copy link
Contributor

@jdtw jdtw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just one minor comment about keeping backwards compatibility in the public struct.

@john-shieh john-shieh merged commit eea7ad6 into master Aug 1, 2022
@john-shieh john-shieh deleted the johnshieh/zlint branch August 1, 2022 18:01
@NikSquared NikSquared mentioned this pull request Jul 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants