You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Both of the citations are useful: section 7.1.2.7.9 is for Subscriber Certificates, whereas section 7.1.2.10.5 is for various types of CA Certificates. However, using the same code for both lints is problematic.
Is it possible to change the code for one of these lints by updating both the CSV entry and the corresponding python code?
The text was updated successfully, but these errors were encountered:
Thanks for filing this, @robstradling. It appears that the code for the Subscriber validation is incorrect: it should be cabf.serverauth.subscriber_multiple_reserved_policy_oids.
Compare these...
https://github.com/digicert/pkilint/blob/main/pkilint/cabf/serverauth/finding_metadata.csv#L72
ERROR cabf.serverauth.ca_multiple_reserved_policy_oids Validates that the content of the certificate policies extension complies with BR 7.1.2.10.5.
https://github.com/digicert/pkilint/blob/main/pkilint/cabf/serverauth/finding_metadata.csv#L73
ERROR cabf.serverauth.ca_multiple_reserved_policy_oids Validates that the certificate policy OID(s) conform to BR 7.1.2.7.9.
Both of the citations are useful: section 7.1.2.7.9 is for Subscriber Certificates, whereas section 7.1.2.10.5 is for various types of CA Certificates. However, using the same
code
for both lints is problematic.Is it possible to change the
code
for one of these lints by updating both the CSV entry and the corresponding python code?The text was updated successfully, but these errors were encountered: