zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
349 stars 108 forks source link

Max length check applies #724

Closed mtgag closed 1 year ago

mtgag commented 1 year ago

Several lints about the maximum length in the value of several components of a subject are always triggered (CheckApplies returns true). It seems more appropriate to check if this component is present in the subject. Lint e_subject_dn_serial_number_max_length for example takes this approach,

(Addendum: Current max length lints check only the subject of a certificate, we could think of new lints checking also the issuer field)