zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
347 stars 107 forks source link

Subject Key Identifier is not recommended by CABF BR v2 #790

Closed baloo closed 4 months ago

baloo commented 5 months ago

With SC62, the CABF BR now lists SKI as not recommended.

Per discussion in #762, zlint should provide two lints, one for rfc5280 behavior and one for CABF BR.

Both lint will conflict with each other, users are expected to select (or ignore) which behavior they mean to follow.

Fixes #749