zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
353 stars 107 forks source link

Zlint incorrectly requires TorServiceDescriptors if V3 onion and DNS name #676

Closed mimi89999 closed 2 years ago

mimi89999 commented 2 years ago

Zlint incorrectly requires TorServiceDescriptors if a certificate contains a V3 onion name and DNS name. I failed to notice that when reviewing https://github.com/zmap/zlint/pull/669.

A certificate https://crt.sh/?id=6748280018 was issued that contains a V3 onion name and a DNS name, that I believe is valid, but has the e_ext_tor_service_descriptor_hash_invalid lint error.