search

zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
358 stars 107 forks source link

Add lint for EV Guidelines section 9.7.3 #815

Open mcpherrinm opened 6 months ago

mcpherrinm commented 6 months ago

This checks that EV certificates contain a CPS URI policy qualifier.

The CPS URI should be a public HTTP URI.

This requirement was included explicitly in the EV guidelines version 1.2, effective April 10, 2008

zakird commented 6 months ago

@mcpherrinm can you fix the failing test (looks like counts changed given logic change)? Once that's resolved, we can merge.

mcpherrinm commented 6 months ago

Yep, will take a look soon. Busy with RWC this week :)

zakird commented 6 months ago

Sounds good! Hope RWC is fun! Bummed I'm missing out this year.

zakird commented 2 months ago

This looks like it's been open for a while modulo a test. @mcpherrinm any chance you'd be willing to look at the failing test?

mcpherrinm commented 3 hours ago

Sorry, totally forgot about this PR. I'll take a look at that test shortly.