From 037b5ec8918805bdb989726750c00d7d74e0d66a Mon Sep 17 00:00:00 2001 From: Todd Gaunt Date: Thu, 22 Feb 2024 11:41:26 -0500 Subject: [PATCH] Add expected integration failures for new lint e_mailbox_address_shall_contain_an_rfc822_name The failures all have email addresses that don't have an **exact** match in the SAN. How the integration tests were run: `make integration INT_FLAGS="-lintSummary -fingerprintSummary -lintFilter='e_mailbox_address_shall_contain_an_rfc822_name'"` Fingerprints of the relevant certificates: 3087f97b6cff020b5320e18d3e326074cbaa128142660f2debe4564ab1ab0179 5f3fcccca91a7b39e8995f79c35cb5e604d4ee0487ea1a41993c84304c0a5c99 63d23132c2511f33bb947f27c398bb824109ccf2d6a2037e3713fe9f7a43b15d b034fa1aa9e501dc14b43d43dfe2210de3e5551744494b55d5f0abd865c67efc c6ac841c78191101725ca7d5ed499be47c15ebeece7d74e6d095e2925e7bb404 e4dbfc94e616ffb59904e394d9dcdd3ab55c26c5586440f37c058eecb907a344 --- v3/integration/config.json | 611 +------------------------------------ 1 file changed, 1 insertion(+), 610 deletions(-) diff --git a/v3/integration/config.json b/v3/integration/config.json index 18ed88ddc..3f46b8044 100644 --- a/v3/integration/config.json +++ b/v3/integration/config.json @@ -323,617 +323,8 @@ } ], "Expected": { - "e_algorithm_identifier_improper_encoding": {}, - "e_basic_constraints_not_critical": { - "ErrCount": 23 - }, - "e_br_prohibit_dsa_usage": {}, - "e_ca_common_name_missing": {}, - "e_ca_country_name_invalid": { - "ErrCount": 8 - }, - "e_ca_country_name_missing": { - "ErrCount": 72 - }, - "e_ca_crl_sign_not_set": { - "ErrCount": 1 - }, - "e_ca_is_ca": {}, - "e_ca_key_cert_sign_not_set": { - "ErrCount": 1 - }, - "e_ca_key_usage_missing": { - "ErrCount": 13 - }, - "e_ca_key_usage_not_critical": { - "ErrCount": 40 - }, - "e_ca_organization_name_missing": { - "ErrCount": 128 - }, - "e_ca_subject_field_empty": {}, - "e_cab_dv_conflicts_with_locality": { - "ErrCount": 13 - }, - "e_cab_dv_conflicts_with_org": { - "ErrCount": 13 - }, - "e_cab_dv_conflicts_with_postal": {}, - "e_cab_dv_conflicts_with_province": { - "ErrCount": 13 - }, - "e_cab_dv_conflicts_with_street": {}, - "e_cab_iv_requires_personal_name": {}, - "e_cab_ov_requires_org": { - "ErrCount": 2 - }, - "e_cert_contains_unique_identifier": {}, - "e_cert_extensions_version_not_3": {}, - "e_cert_policy_iv_requires_country": {}, - "e_cert_policy_iv_requires_province_or_locality": {}, - "e_cert_policy_ov_requires_country": {}, - "e_cert_policy_ov_requires_province_or_locality": { - "ErrCount": 326 - }, - "e_cert_sig_alg_not_match_tbs_sig_alg": { - "ErrCount": 11 - }, - "e_cert_unique_identifier_version_not_2_or_3": {}, - "e_distribution_point_incomplete": {}, - "e_dnsname_bad_character_in_label": { - "ErrCount": 55927 - }, - "e_dnsname_contains_bare_iana_suffix": { - "ErrCount": 8 - }, - "e_dnsname_contains_prohibited_reserved_label": {}, - "e_dnsname_empty_label": { - "ErrCount": 197 - }, - "e_dnsname_hyphen_in_sld": {}, - "e_dnsname_label_too_long": { - "ErrCount": 22 - }, - "e_dnsname_left_label_wildcard_correct": { - "ErrCount": 17 - }, - "e_dnsname_not_valid_tld": { - "ErrCount": 86371 - }, - "e_dnsname_underscore_in_sld": { - "ErrCount": 5 - }, - "e_dnsname_wildcard_only_in_left_label": { - "ErrCount": 2 - }, - "e_dsa_correct_order_in_subgroup": {}, - "e_dsa_improper_modulus_or_divisor_size": { - "ErrCount": 11 - }, - "e_dsa_params_missing": {}, - "e_dsa_shorter_than_2048_bits": { - "ErrCount": 11 - }, - "e_dsa_unique_correct_representation": {}, - "e_ec_improper_curves": {}, - "e_ecdsa_allowed_ku": {}, - "e_ev_business_category_missing": { - "ErrCount": 2 - }, - "e_ev_country_name_missing": {}, - "e_ev_not_wildcard": { - "ErrCount": 1 - }, - "e_ev_organization_id_missing": {}, - "e_ev_organization_name_missing": {}, - "e_ev_san_ip_address_present": { - "ErrCount": 3 - }, - "e_ev_serial_number_missing": { - "ErrCount": 2 - }, - "e_ev_valid_time_too_long": { - "ErrCount": 221 - }, - "e_ext_aia_marked_critical": {}, - "e_ext_authority_key_identifier_critical": {}, - "e_ext_authority_key_identifier_no_key_identifier": { - "ErrCount": 9987 - }, - "e_ext_cert_policy_disallowed_any_policy_qualifier": {}, - "e_ext_cert_policy_duplicate": {}, - "e_ext_cert_policy_explicit_text_ia5_string": {}, - "e_ext_cert_policy_explicit_text_too_long": { - "ErrCount": 567 - }, - "e_ext_duplicate_extension": {}, - "e_ext_freshest_crl_marked_critical": {}, - "e_ext_ian_dns_not_ia5_string": {}, - "e_ext_ian_empty_name": {}, - "e_ext_ian_no_entries": {}, - "e_ext_ian_rfc822_format_invalid": {}, - "e_ext_ian_space_dns_name": {}, - "e_ext_ian_uri_format_invalid": {}, - "e_ext_ian_uri_host_not_fqdn_or_ip": {}, - "e_ext_ian_uri_not_ia5": {}, - "e_ext_ian_uri_relative": {}, - "e_ext_key_usage_cert_sign_without_ca": {}, - "e_ext_key_usage_without_bits": {}, - "e_ext_name_constraints_not_critical": { - "ErrCount": 216 - }, - "e_ext_name_constraints_not_in_ca": {}, - "e_ext_nc_intersects_reserved_ip": {}, - "e_ext_policy_constraints_empty": {}, - "e_ext_policy_constraints_not_critical": { - "ErrCount": 88 - }, - "e_ext_policy_map_any_policy": {}, - "e_ext_san_contains_reserved_ip": { - "ErrCount": 42 - }, - "e_ext_san_directory_name_present": { - "ErrCount": 15676 - }, - "e_ext_san_dns_name_too_long": { - "ErrCount": 1 - }, - "e_ext_san_dns_not_ia5_string": { - "ErrCount": 1 - }, - "e_ext_san_edi_party_name_present": {}, - "e_ext_san_empty_name": { - "ErrCount": 2 - }, - "e_ext_san_missing": { - "ErrCount": 52385 - }, - "e_ext_san_no_entries": { - "ErrCount": 3 - }, - "e_ext_san_not_critical_without_subject": {}, - "e_ext_san_other_name_present": { - "ErrCount": 476 - }, - "e_ext_san_registered_id_present": {}, - "e_ext_san_rfc822_format_invalid": { + "e_mailbox_address_shall_contain_an_rfc822_name": { "ErrCount": 6 - }, - "e_ext_san_rfc822_name_present": { - "ErrCount": 36356 - }, - "e_ext_san_space_dns_name": {}, - "e_ext_san_uniform_resource_identifier_present": { - "ErrCount": 231 - }, - "e_ext_san_uri_format_invalid": { - "ErrCount": 186 - }, - "e_ext_san_uri_host_not_fqdn_or_ip": { - "ErrCount": 186 - }, - "e_ext_san_uri_not_ia5": {}, - "e_ext_san_uri_relative": { - "ErrCount": 186 - }, - "e_ext_subject_directory_attr_critical": {}, - "e_ext_subject_key_identifier_critical": {}, - "e_ext_subject_key_identifier_missing_ca": { - "ErrCount": 14 - }, - "e_ext_tor_service_descriptor_hash_invalid": {}, - "e_generalized_time_does_not_include_seconds": {}, - "e_generalized_time_includes_fraction_seconds": {}, - "e_generalized_time_not_in_zulu": {}, - "e_ian_bare_wildcard": {}, - "e_ian_dns_name_includes_null_char": {}, - "e_ian_dns_name_starts_with_period": {}, - "e_ian_wildcard_not_first": {}, - "e_incorrect_ku_encoding": { - "ErrCount": 6725 - }, - "e_inhibit_any_policy_not_critical": { - "ErrCount": 70 - }, - "e_international_dns_name_not_nfc": {}, - "e_international_dns_name_not_unicode": { - "ErrCount": 1 - }, - "e_invalid_certificate_version": {}, - "e_issuer_dn_country_not_printable_string": {}, - "e_issuer_field_empty": {}, - "e_key_usage_and_extended_key_usage_inconsistent": { - "ErrCount": 31843 - }, - "e_key_usage_incorrect_length": {}, - "e_mp_authority_key_identifier_correct": { - "ErrCount": 3704 - }, - "e_mp_ecdsa_pub_key_encoding_correct": {}, - "e_mp_ecdsa_signature_encoding_correct": {}, - "e_mp_exponent_cannot_be_one": {}, - "e_mp_modulus_must_be_2048_bits_or_more": { - "ErrCount": 8 - }, - "e_mp_modulus_must_be_divisible_by_8": { - "ErrCount": 21 - }, - "e_mp_rsassa-pss_in_spki": {}, - "e_mp_rsassa-pss_parameters_encoding_in_signature_algorithm_correct": {}, - "e_name_constraint_empty": {}, - "e_name_constraint_maximum_not_absent": {}, - "e_name_constraint_minimum_non_zero": {}, - "e_name_constraint_not_fqdn": {}, - "e_no_underscores_before_1_6_2": { - "ErrCount": 370 - }, - "e_ocsp_id_pkix_ocsp_nocheck_ext_not_included_server_auth": { - "ErrCount": 93 - }, - "e_old_root_ca_rsa_mod_less_than_2048_bits": { - "ErrCount": 1 - }, - "e_old_sub_ca_rsa_mod_less_than_1024_bits": {}, - "e_old_sub_cert_rsa_mod_less_than_1024_bits": { - "ErrCount": 439 - }, - "e_onion_subject_validity_time_too_large": {}, - "e_organizational_unit_name_prohibited": {}, - "e_path_len_constraint_improperly_included": { - "ErrCount": 17 - }, - "e_path_len_constraint_zero_or_less": {}, - "e_prohibit_dsa_usage": {}, - "e_public_key_type_not_allowed": {}, - "e_qcstatem_etsi_present_qcs_critical": {}, - "e_qcstatem_etsi_type_as_statem": { - "ErrCount": 240 - }, - "e_qcstatem_mandatory_etsi_statems": { - "ErrCount": 1707 - }, - "e_qcstatem_qccompliance_valid": {}, - "e_qcstatem_qclimitvalue_valid": {}, - "e_qcstatem_qcpds_valid": {}, - "e_qcstatem_qcretentionperiod_valid": {}, - "e_qcstatem_qcsscd_valid": {}, - "e_qcstatem_qctype_valid": {}, - "e_rfc_dnsname_empty_label": { - "ErrCount": 16 - }, - "e_rfc_dnsname_hyphen_in_sld": {}, - "e_rfc_dnsname_label_too_long": {}, - "e_rfc_dnsname_underscore_in_sld": { - "ErrCount": 1 - }, - "e_root_ca_extended_key_usage_present": {}, - "e_root_ca_key_usage_must_be_critical": { - "ErrCount": 19 - }, - "e_root_ca_key_usage_present": { - "ErrCount": 5 - }, - "e_rsa_allowed_ku_ca": { - "ErrCount": 2 - }, - "e_rsa_allowed_ku_ee": { - "ErrCount": 1774 - }, - "e_rsa_allowed_ku_no_encipherment_ca": { - "ErrCount": 18 - }, - "e_rsa_exp_negative": {}, - "e_rsa_fermat_factorization": {}, - "e_rsa_mod_less_than_2048_bits": { - "ErrCount": 34006 - }, - "e_rsa_no_public_key": {}, - "e_rsa_public_exponent_not_odd": {}, - "e_rsa_public_exponent_too_small": {}, - "e_san_bare_wildcard": { - "ErrCount": 1 - }, - "e_san_dns_name_includes_null_char": {}, - "e_san_dns_name_onion_invalid": {}, - "e_san_dns_name_onion_not_ev_cert": {}, - "e_san_dns_name_starts_with_period": {}, - "e_san_wildcard_not_first": { - "ErrCount": 12 - }, - "e_serial_number_longer_than_20_octets": { - "ErrCount": 252 - }, - "e_serial_number_not_positive": { - "ErrCount": 10 - }, - "e_signature_algorithm_not_supported": { - "ErrCount": 23 - }, - "e_spki_rsa_encryption_parameter_not_null": { - "ErrCount": 7 - }, - "e_sub_ca_aia_marked_critical": {}, - "e_sub_ca_aia_missing": { - "ErrCount": 292 - }, - "e_sub_ca_certificate_policies_missing": { - "ErrCount": 59 - }, - "e_sub_ca_crl_distribution_points_does_not_contain_url": { - "ErrCount": 2 - }, - "e_sub_ca_crl_distribution_points_marked_critical": {}, - "e_sub_ca_crl_distribution_points_missing": { - "ErrCount": 4 - }, - "e_sub_cert_aia_does_not_contain_ocsp_url": { - "ErrCount": 13944 - }, - "e_sub_cert_aia_marked_critical": {}, - "e_sub_cert_aia_missing": { - "ErrCount": 11935 - }, - "e_sub_cert_cert_policy_empty": { - "ErrCount": 738 - }, - "e_sub_cert_certificate_policies_missing": { - "ErrCount": 738 - }, - "e_sub_cert_country_name_must_appear": { - "ErrCount": 171 - }, - "e_sub_cert_crl_distribution_points_does_not_contain_url": { - "ErrCount": 13669 - }, - "e_sub_cert_crl_distribution_points_marked_critical": {}, - "e_sub_cert_eku_missing": { - "ErrCount": 81098 - }, - "e_sub_cert_eku_server_auth_client_auth_missing": { - "ErrCount": 4934 - }, - "e_sub_cert_given_name_surname_contains_correct_policy": { - "ErrCount": 1793 - }, - "e_sub_cert_key_usage_cert_sign_bit_set": {}, - "e_sub_cert_key_usage_crl_sign_bit_set": {}, - "e_sub_cert_locality_name_must_appear": { - "ErrCount": 2709 - }, - "e_sub_cert_locality_name_must_not_appear": { - "ErrCount": 15 - }, - "e_sub_cert_not_is_ca": { - "ErrCount": 1 - }, - "e_sub_cert_or_sub_ca_using_sha1": { - "ErrCount": 1295 - }, - "e_sub_cert_postal_code_must_not_appear": {}, - "e_sub_cert_province_must_appear": { - "ErrCount": 2709 - }, - "e_sub_cert_province_must_not_appear": { - "ErrCount": 8 - }, - "e_sub_cert_street_address_should_not_exist": {}, - "e_sub_cert_valid_time_longer_than_39_months": { - "ErrCount": 2756 - }, - "e_sub_cert_valid_time_longer_than_825_days": { - "ErrCount": 31 - }, - "e_subject_common_name_max_length": { - "ErrCount": 60 - }, - "e_subject_common_name_not_exactly_from_san": { - "ErrCount": 2 - }, - "e_subject_common_name_not_from_san": { - "ErrCount": 94976 - }, - "e_subject_contains_noninformational_value": { - "ErrCount": 338 - }, - "e_subject_contains_organizational_unit_name_and_no_organization_name": {}, - "e_subject_contains_reserved_arpa_ip": {}, - "e_subject_contains_reserved_ip": { - "ErrCount": 1 - }, - "e_subject_country_not_iso": { - "ErrCount": 167 - }, - "e_subject_dn_country_not_printable_string": { - "ErrCount": 4 - }, - "e_subject_dn_not_printable_characters": { - "ErrCount": 541 - }, - "e_subject_dn_serial_number_max_length": {}, - "e_subject_dn_serial_number_not_printable_string": { - "ErrCount": 51 - }, - "e_subject_email_max_length": {}, - "e_subject_empty_without_san": {}, - "e_subject_given_name_max_length": {}, - "e_subject_info_access_marked_critical": {}, - "e_subject_locality_name_max_length": {}, - "e_subject_not_dn": {}, - "e_subject_organization_name_max_length": { - "ErrCount": 92 - }, - "e_subject_organizational_unit_name_max_length": { - "ErrCount": 151 - }, - "e_subject_postal_code_max_length": { - "ErrCount": 3 - }, - "e_subject_printable_string_badalpha": { - "ErrCount": 225 - }, - "e_subject_state_name_max_length": {}, - "e_subject_street_address_max_length": {}, - "e_subject_surname_max_length": {}, - "e_superfluous_ku_encoding": { - "ErrCount": 3 - }, - "e_tbs_signature_rsa_encryption_parameter_not_null": { - "ErrCount": 103 - }, - "e_tls_server_cert_valid_time_longer_than_398_days": { - "ErrCount": 3 - }, - "e_underscore_not_permissible_in_dnsname": {}, - "e_utc_time_does_not_include_seconds": { - "ErrCount": 1 - }, - "e_utc_time_not_in_zulu": {}, - "e_validity_time_not_positive": {}, - "e_wrong_time_format_pre2050": { - "ErrCount": 23 - }, - "n_ca_digital_signature_not_set": { - "NoticeCount": 1409 - }, - "n_contains_redacted_dnsname": { - "NoticeCount": 464 - }, - "n_dnsname_wildcard_left_of_public_suffix": { - "NoticeCount": 3 - }, - "n_ecdsa_ee_invalid_ku": { - "NoticeCount": 31 - }, - "n_mp_allowed_eku": { - "NoticeCount": 48 - }, - "n_multiple_subject_rdn": { - "NoticeCount": 972 - }, - "n_san_dns_name_duplicate": { - "NoticeCount": 5342 - }, - "n_san_iana_pub_suffix_empty": { - "NoticeCount": 668 - }, - "n_sub_ca_eku_missing": { - "NoticeCount": 1415 - }, - "n_sub_ca_eku_not_technically_constrained": { - "NoticeCount": 10 - }, - "n_subject_common_name_included": { - "NoticeCount": 712639 - }, - "w_ct_sct_policy_count_unsatisfied": { - "NoticeCount": 5003 - }, - "w_distribution_point_missing_ldap_or_uri": { - "WarnCount": 1249 - }, - "w_dnsname_underscore_in_trd": { - "WarnCount": 382 - }, - "w_eku_critical_improperly": {}, - "w_ext_aia_access_location_missing": { - "WarnCount": 863 - }, - "w_ext_cert_policy_contains_noticeref": { - "WarnCount": 7821 - }, - "w_ext_cert_policy_explicit_text_includes_control": { - "WarnCount": 1 - }, - "w_ext_cert_policy_explicit_text_not_nfc": {}, - "w_ext_cert_policy_explicit_text_not_utf8": { - "WarnCount": 15350 - }, - "w_ext_crl_distribution_marked_critical": {}, - "w_ext_ian_critical": {}, - "w_ext_key_usage_not_critical": { - "WarnCount": 25323 - }, - "w_ext_policy_map_not_critical": { - "WarnCount": 163 - }, - "w_ext_policy_map_not_in_cert_policy": { - "WarnCount": 5 - }, - "w_ext_san_critical_with_subject_dn": { - "WarnCount": 95 - }, - "w_ext_subject_key_identifier_missing_sub_cert": { - "WarnCount": 119268 - }, - "w_extra_subject_common_names": { - "WarnCount": 36 - }, - "w_ian_iana_pub_suffix_empty": {}, - "w_issuer_dn_leading_whitespace": {}, - "w_issuer_dn_trailing_whitespace": {}, - "w_multiple_issuer_rdn": {}, - "w_name_constraint_on_edi_party_name": {}, - "w_name_constraint_on_registered_id": {}, - "w_name_constraint_on_x400": {}, - "w_qcstatem_qcpds_lang_case": { - "WarnCount": 934 - }, - "w_qcstatem_qctype_web": { - "WarnCount": 55 - }, - "w_rfc_dnsname_underscore_in_trd": { - "WarnCount": 364 - }, - "w_root_ca_basic_constraints_path_len_constraint_field_present": { - "WarnCount": 3 - }, - "w_root_ca_contains_cert_policy": { - "WarnCount": 8 - }, - "w_rsa_mod_factors_smaller_than_752": {}, - "w_rsa_mod_not_odd": {}, - "w_rsa_public_exponent_not_in_range": { - "WarnCount": 110 - }, - "w_sub_ca_aia_does_not_contain_issuing_ca_url": { - "WarnCount": 990 - }, - "w_sub_ca_aia_missing": { - "WarnCount": 4 - }, - "w_sub_ca_certificate_policies_marked_critical": {}, - "w_sub_ca_eku_critical": { - "WarnCount": 9 - }, - "w_sub_ca_name_constraints_not_critical": { - "WarnCount": 115 - }, - "w_sub_cert_aia_does_not_contain_issuing_ca_url": { - "WarnCount": 48465 - }, - "w_sub_cert_certificate_policies_marked_critical": {}, - "w_sub_cert_eku_extra_values": { - "WarnCount": 25405 - }, - "w_sub_cert_sha1_expiration_too_long": { - "WarnCount": 11058 - }, - "w_subject_contains_malformed_arpa_ip": { - "WarnCount": 2 - }, - "w_subject_dn_leading_whitespace": { - "WarnCount": 36 - }, - "w_subject_dn_trailing_whitespace": { - "WarnCount": 213 - }, - "w_subject_given_name_recommended_max_length": {}, - "w_subject_surname_recommended_max_length": {}, - "w_tls_server_cert_valid_time_longer_than_397_days": { - "WarnCount": 223 - }, - "w_sub_cert_aia_contains_internal_names": { - "WarnCount": 210 } } } \ No newline at end of file