Only apply CN check to Subscriber certificates

zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.

https://zmap.io

Apache License 2.0

361 stars 110 forks source link

Only apply CN check to Subscriber certificates #851

Closed XolphinMartijn closed 5 months ago

XolphinMartijn commented 5 months ago

During a test run, lint_commonname_mailbox_validated spat out an error on a Subordinate CA. It seems the lint is currently being run on all certificates having the S/MIME Legacy OID, however, the requirement on the commonName only apply to Subscriber certificates.