Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Lint that .onion addresses are well-formed #450

Merged
merged 3 commits into from
Jun 12, 2020
Merged

Conversation

sleevi
Copy link
Contributor

@sleevi sleevi commented Jun 10, 2020

Adds a new lint, identified as e_san_dns_name_onion_invalid,
that makes sure that the .onion addresses present within a
certificate are well-formed v2 or v3 addresses, according to
the v2 or v3 Rendezvous specifications.

Closes #440

Adds a new lint, identified as e_san_dns_name_onion_invalid,
that makes sure that the .onion addresses present within a
certificate are well-formed v2 or v3 addresses, according to
the v2 or v3 Rendezvous specifications.

Closes zmap#440
@cpu cpu self-assigned this Jun 11, 2020
Copy link
Member

@cpu cpu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@sleevi This branch was a pleasure to review. Thank you! I really appreciated the thorough commenting. I had a question and a few nits but nothing that merits requesting changes.

v2/lints/cabf_br/lint_san_dns_name_onion_invalid.go Outdated Show resolved Hide resolved
v2/lints/cabf_br/lint_san_dns_name_onion_invalid.go Outdated Show resolved Hide resolved
v2/lints/cabf_br/lint_san_dns_name_onion_invalid.go Outdated Show resolved Hide resolved
@cpu cpu merged commit d4acbba into zmap:master Jun 12, 2020
@cpu
Copy link
Member

cpu commented Jun 12, 2020

Thanks again @sleevi. I hope this helps encourage some CAs to issue DV certs for .onion subjects.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Bug: .onion names are no longer prohibited by the Baseline Requirements
2 participants