search

zmap / zlint

X.509 Certificate Linter focused on Web PKI standards and requirements.
https://zmap.io
Apache License 2.0
361 stars 110 forks source link

Add lint to check that CRL does not have duplicates in RevokedCertificates #890

Closed kowshikRoy closed 3 weeks ago

kowshikRoy commented 4 weeks ago

Add lint to check that CRL does not have duplicates in RevokedCertificates

Though it's not specifically mentioned in the RFC(https://datatracker.ietf.org/doc/html/rfc5280#section-5.1.2.6), nonetheless, it's a good check to have so that CRL doesn't contain any redundant certs.