zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
361 stars 110 forks source link

Lenient restriction on country name attribute #821

Closed joyantaDebnath closed 7 months ago

joyantaDebnath commented 7 months ago

The country name within the subject or issuer Name should consist of two printable string characters, yet ZLint’s parser does not enforce this length requirement. We found country name such as "My Country" is not reported as an error.

joyantaDebnath commented 7 months ago

This case is covered when all the linter profiles are enabled. Not just RFC 5280.