zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
347 stars 106 forks source link

Subscriber aia lints #860

Closed mtgag closed 1 week ago

mtgag commented 2 weeks ago

This pull request adds a few lints from Section 7.1.2.7.7 of BR. This work has been done in close cooperation with D-Trust CA. We would be grateful if you could incorporate this PR into the main project.

Also while looking what is already implemented to avoid duplications, a few corrections have been made and a test has been added to an older lint (e_sub_cert_aia_does_not_contain_ocsp_url) to show the difference between the old lint which is a Pass and the new one (e_aia_ocsp_must_have_http_only) which is an Error for the same certificate.