search

zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
347 stars 106 forks source link

Lenient parsing of default values #823

Open joyantaDebnath opened 3 months ago

joyantaDebnath commented 3 months ago

Based on X.690 DER restrictions (section 11.5), when encoding a set or sequence, any field that is equal to its default value shall not be included in the encoding. Nevertheless, ZLint’s parser does not adhere to this requirement and reports errors for specific fields that have default values, such as the CA flag of the Basic Constraint extension, the critical flag of extensions, and the Version.

CBonnell commented 3 months ago

I think this is a duplicate of https://github.com/zmap/zlint/issues/639.