search

zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
361 stars 110 forks source link

Running Specific Lints on CRLs #872

Closed joshschoenberg closed 3 months ago

joshschoenberg commented 3 months ago

I am trying to use ZLint in order to lint CRLs, but I want to only lint from the RFC5280 source. Based on my understanding of the ZLint code, it looks like ZLint currently does not support linting CRLs from specific sources. However, it looks like there could be an easy fix to this (including the registry as an argument to the function that runs the lint on the CRL). Am I correct about my assumptions? Is there a reason that ZLint does not currently support linting CRLs from specific sources?

christopher-henderson commented 3 months ago

Is there a reason that ZLint does not currently support linting CRLs from specific sources?

Not that I am aware of. It was likely an oversight that was not found since it filter is not so commonly used by CAs, I think. Thank you for addressing this #874 !