SSLMate / caatestsuite

Test suite which checks compliance with CAA checking as defined in version 1.4.8 of the CABF Baseline Requirements
https://caatestsuite.com
Apache License 2.0
10 stars 4 forks source link

Test for correct issuewild processing in presence of issue #5

Open ivanr opened 7 years ago

ivanr commented 7 years ago

The idea is to see if issue tags are ignored when issuewild is present. Something like this:

new-wild-test        IN    CAA    0 issue “someca.com”
new-wild-test        IN    CAA    0 issuewild “;”

I understand that this won't work as a way to test CAs' correct implementations, because to issue the "someca.com" must match what they're expecting. This could be resolved by listing all known CAs. Alternatively, lots of hosts could be created, one per known CA.