package cabf_br
import "github.com/zmap/zlint/v3/lints/cabf_br"
Index ¶
- func NewAlgorithmObjectIdentifierEncoding() lint.LintInterface
- func NewArpaMalformedIP() lint.LintInterface
- func NewArpaReservedIP() lint.LintInterface
- func NewBRAIAAccessLocationUnique() lint.LintInterface
- func NewBRAIAAccessMethodAllowed() lint.LintInterface
- func NewBRAIACAIssuersHasHTTPOnly() lint.LintInterface
- func NewBRAIAOCSPHasHTTPOnly() lint.LintInterface
- func NewCaAiaMissing() lint.LintInterface
- func NewCaAiaShouldNotBeMissing() lint.LintInterface
- func NewCaCRLSignNotSet() lint.LintInterface
- func NewCaCommonNameMissing() lint.LintInterface
- func NewCaCountryNameInvalid() lint.LintInterface
- func NewCaCountryNameMissing() lint.LintInterface
- func NewCaDigSignNotSet() lint.LintInterface
- func NewCaInvalidEKU() lint.LintInterface
- func NewCaIsCA() lint.LintInterface
- func NewCaKeyCertSignNotSet() lint.LintInterface
- func NewCaKeyUsageMissing() lint.LintInterface
- func NewCaKeyUsageNotCrit() lint.LintInterface
- func NewCaOrganizationNameMissing() lint.LintInterface
- func NewCertPolicyConflictsWithLocality() lint.LintInterface
- func NewCertPolicyConflictsWithOrg() lint.LintInterface
- func NewCertPolicyConflictsWithPostal() lint.LintInterface
- func NewCertPolicyConflictsWithProvince() lint.LintInterface
- func NewCertPolicyConflictsWithStreet() lint.LintInterface
- func NewCertPolicyIVRequiresCountry() lint.LintInterface
- func NewCertPolicyIVRequiresProvinceOrLocal() lint.LintInterface
- func NewCertPolicyOVRequiresCountry() lint.LintInterface
- func NewCertPolicyOVRequiresProvinceOrLocal() lint.LintInterface
- func NewCertPolicyRequiresOrg() lint.LintInterface
- func NewCertPolicyRequiresPersonalName() lint.LintInterface
- func NewCommonNames() lint.LintInterface
- func NewCommonNamesSC62() lint.LintInterface
- func NewCountryNotIso() lint.LintInterface
- func NewCrlDistribPointsNotHTTP() lint.LintInterface
- func NewCrlHasValidReasonCode() lint.RevocationListLintInterface
- func NewCrlNextUpdateInvalid() lint.RevocationListLintInterface
- func NewCrlReasonCodeNotCritical() lint.RevocationListLintInterface
- func NewCrlissuerMustNotBePresentInCdp() lint.LintInterface
- func NewDNSNameContainsProhibitedReservedLabel() lint.LintInterface
- func NewDNSNameEmptyLabel() lint.LintInterface
- func NewDNSNameHyphenInSLD() lint.LintInterface
- func NewDNSNameLabelLengthTooLong() lint.LintInterface
- func NewDNSNameLeftLabelWildcardCheck() lint.LintInterface
- func NewDNSNameProperCharacters() lint.LintInterface
- func NewDNSNameUnderscoreInSLD() lint.LintInterface
- func NewDNSNameUnderscoreInTRD() lint.LintInterface
- func NewDNSNameValidTLD() lint.LintInterface
- func NewDNSNameWildcardLeftofPublicSuffix() lint.LintInterface
- func NewDNSNameWildcardOnlyInLeftlabel() lint.LintInterface
- func NewDnsNameContainsBareIANASuffix() lint.LintInterface
- func NewDsaImproperSize() lint.LintInterface
- func NewDsaParamsMissing() lint.LintInterface
- func NewDsaSubgroup() lint.LintInterface
- func NewDsaTooShort() lint.LintInterface
- func NewDsaUniqueCorrectRepresentation() lint.LintInterface
- func NewDuplicateSubjectAttribs() lint.LintInterface
- func NewDvSubjectInvalidValues() lint.LintInterface
- func NewEKUCrit() lint.LintInterface
- func NewEcImproperCurves() lint.LintInterface
- func NewExtSANCriticalWithSubjectDN() lint.LintInterface
- func NewExtraSubjectCommonNames() lint.LintInterface
- func NewIllegalChar() lint.LintInterface
- func NewInvalidCACertificatePolicies() lint.LintInterface
- func NewInvalidCPSUri() lint.LintInterface
- func NewInvalidCertificateVersion() lint.LintInterface
- func NewInvalidSubjectRDNOrder() lint.LintInterface
- func NewNCReservedIPNet() lint.LintInterface
- func NewNoUnderscoreBefore1_6_2() lint.LintInterface
- func NewOCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth() lint.LintInterface
- func NewOnionNotEV() lint.LintInterface
- func NewOnionNotValid() lint.LintInterface
- func NewOrganizationalUnitNameProhibited() lint.LintInterface
- func NewPolicyQualifiersOtherThanCpsNotPermitted() lint.LintInterface
- func NewProhibitDSAUsage() lint.LintInterface
- func NewPublicKeyAllowed() lint.LintInterface
- func NewRootCAContainsCertPolicy() lint.LintInterface
- func NewRootCAContainsEKU() lint.LintInterface
- func NewRootCAKeyUsageMustBeCritical() lint.LintInterface
- func NewRootCAKeyUsagePresent() lint.LintInterface
- func NewRootCaModSize() lint.LintInterface
- func NewRootCaPathLenPresent() lint.LintInterface
- func NewRsaModSmallFactor() lint.LintInterface
- func NewRsaParsedTestsExpBounds() lint.LintInterface
- func NewRsaParsedTestsExpInRange() lint.LintInterface
- func NewRsaParsedTestsKeyExpOdd() lint.LintInterface
- func NewRsaParsedTestsKeyModOdd() lint.LintInterface
- func NewRsaParsedTestsKeySize() lint.LintInterface
- func NewSANDirName() lint.LintInterface
- func NewSANEDI() lint.LintInterface
- func NewSANMissing() lint.LintInterface
- func NewSANOtherName() lint.LintInterface
- func NewSANRegId() lint.LintInterface
- func NewSANReservedIP() lint.LintInterface
- func NewSANRfc822() lint.LintInterface
- func NewSANURI() lint.LintInterface
- func NewSha1ExpireLong() lint.LintInterface
- func NewSigAlgTestsSHA1() lint.LintInterface
- func NewSignatureAlgorithmNotSupported() lint.LintInterface
- func NewSubCACRLDistCrit() lint.LintInterface
- func NewSubCACRLDistMissing() lint.LintInterface
- func NewSubCACRLDistNoUrl() lint.LintInterface
- func NewSubCACertPolicyCrit() lint.LintInterface
- func NewSubCACertPolicyMissing() lint.LintInterface
- func NewSubCAEKUCrit() lint.LintInterface
- func NewSubCAEKUMissing() lint.LintInterface
- func NewSubCAEKUValidFields() lint.LintInterface
- func NewSubCANameConstraintsNotCritical() lint.LintInterface
- func NewSubCRLDistNoURL() lint.LintInterface
- func NewSubCaAIAMarkedCritical() lint.LintInterface
- func NewSubCaIssuerUrl() lint.LintInterface
- func NewSubCaModSize() lint.LintInterface
- func NewSubCertAIAInternalName() lint.LintInterface
- func NewSubCertAiaMarkedCritical() lint.LintInterface
- func NewSubCertAiaMissing() lint.LintInterface
- func NewSubCertBasicConstCrit() lint.LintInterface
- func NewSubCertCountryNameMustAppear() lint.LintInterface
- func NewSubCertIssuerUrl() lint.LintInterface
- func NewSubCertKeyUsageBitSet() lint.LintInterface
- func NewSubCertLocalityNameMustAppear() lint.LintInterface
- func NewSubCertLocalityNameMustNotAppear() lint.LintInterface
- func NewSubCertNotCA() lint.LintInterface
- func NewSubCertOcspUrl() lint.LintInterface
- func NewSubCertPolicy() lint.LintInterface
- func NewSubCertPolicyCrit() lint.LintInterface
- func NewSubCertPolicyEmpty() lint.LintInterface
- func NewSubCertPostalCodeMustNotAppear() lint.LintInterface
- func NewSubCertProvinceMustAppear() lint.LintInterface
- func NewSubCertProvinceMustNotAppear() lint.LintInterface
- func NewSubCertStreetAddressShouldNotExist() lint.LintInterface
- func NewSubCertSubjectGnOrSnContainsPolicy() lint.LintInterface
- func NewSubCertValidTimeLongerThan39Months() lint.LintInterface
- func NewSubCertValidTimeLongerThan825Days() lint.LintInterface
- func NewSubCrlDistCrit() lint.LintInterface
- func NewSubCrlSignAllowed() lint.LintInterface
- func NewSubExtKeyUsage() lint.LintInterface
- func NewSubExtKeyUsageCheck() lint.LintInterface
- func NewSubExtKeyUsageClientOrServer() lint.LintInterface
- func NewSubExtKeyUsageLegalUsage() lint.LintInterface
- func NewSubModSize() lint.LintInterface
- func NewSubjectCommonNameNotExactlyFromSAN() lint.LintInterface
- func NewSubjectCommonNameNotFromSAN() lint.LintInterface
- func NewSubjectContainsOrganizationalUnitNameButNoOrganizationName() lint.LintInterface
- func NewSubjectKeyIdNotRecommendedSubscriber() lint.LintInterface
- func NewSubjectOrgUnitInCACert() lint.LintInterface
- func NewSubjectRdnsCorrectEncoding() lint.LintInterface
- func NewSubjectReservedIP() lint.LintInterface
- func NewTorServiceDescHashInvalid() lint.LintInterface
- type CertPolicyIVRequiresCountry
- func (l *CertPolicyIVRequiresCountry) CheckApplies(cert *x509.Certificate) bool
- func (l *CertPolicyIVRequiresCountry) Execute(cert *x509.Certificate) *lint.LintResult
- type CertPolicyIVRequiresProvinceOrLocal
- func (l *CertPolicyIVRequiresProvinceOrLocal) CheckApplies(cert *x509.Certificate) bool
- func (l *CertPolicyIVRequiresProvinceOrLocal) Execute(cert *x509.Certificate) *lint.LintResult
- type CertPolicyOVRequiresCountry
- func (l *CertPolicyOVRequiresCountry) CheckApplies(cert *x509.Certificate) bool
- func (l *CertPolicyOVRequiresCountry) Execute(cert *x509.Certificate) *lint.LintResult
- type CertPolicyOVRequiresProvinceOrLocal
- func (l *CertPolicyOVRequiresProvinceOrLocal) CheckApplies(cert *x509.Certificate) bool
- func (l *CertPolicyOVRequiresProvinceOrLocal) Execute(cert *x509.Certificate) *lint.LintResult
- type CertPolicyRequiresOrg
- func (l *CertPolicyRequiresOrg) CheckApplies(cert *x509.Certificate) bool
- func (l *CertPolicyRequiresOrg) Execute(cert *x509.Certificate) *lint.LintResult
- type CertPolicyRequiresPersonalName
- func (l *CertPolicyRequiresPersonalName) CheckApplies(cert *x509.Certificate) bool
- func (l *CertPolicyRequiresPersonalName) Execute(cert *x509.Certificate) *lint.LintResult
- type CrlNextUpdateInvalid
- func (l *CrlNextUpdateInvalid) CheckApplies(c *x509.RevocationList) bool
- func (l *CrlNextUpdateInvalid) Configure() interface{}
- func (l *CrlNextUpdateInvalid) Execute(c *x509.RevocationList) *lint.LintResult
- type CrlissuerMustNotBePresentInCdp
- func (l *CrlissuerMustNotBePresentInCdp) CheckApplies(c *x509.Certificate) bool
- func (l *CrlissuerMustNotBePresentInCdp) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameContainsProhibitedReservedLabel
- func (l *DNSNameContainsProhibitedReservedLabel) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameContainsProhibitedReservedLabel) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameEmptyLabel
- func (l *DNSNameEmptyLabel) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameEmptyLabel) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameHyphenInSLD
- func (l *DNSNameHyphenInSLD) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameHyphenInSLD) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameLabelLengthTooLong
- func (l *DNSNameLabelLengthTooLong) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameLabelLengthTooLong) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameLeftLabelWildcardCheck
- func (l *DNSNameLeftLabelWildcardCheck) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameLeftLabelWildcardCheck) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameProperCharacters
- func (l *DNSNameProperCharacters) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameProperCharacters) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameUnderscoreInSLD
- func (l *DNSNameUnderscoreInSLD) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameUnderscoreInSLD) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameUnderscoreInTRD
- func (l *DNSNameUnderscoreInTRD) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameUnderscoreInTRD) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameValidTLD
- func (l *DNSNameValidTLD) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameValidTLD) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameWildcardLeftofPublicSuffix
- func (l *DNSNameWildcardLeftofPublicSuffix) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameWildcardLeftofPublicSuffix) Execute(c *x509.Certificate) *lint.LintResult
- type DNSNameWildcardOnlyInLeftlabel
- func (l *DNSNameWildcardOnlyInLeftlabel) CheckApplies(c *x509.Certificate) bool
- func (l *DNSNameWildcardOnlyInLeftlabel) Execute(c *x509.Certificate) *lint.LintResult
- type ExtSANCriticalWithSubjectDN
- func (l *ExtSANCriticalWithSubjectDN) CheckApplies(cert *x509.Certificate) bool
- func (l *ExtSANCriticalWithSubjectDN) Execute(cert *x509.Certificate) *lint.LintResult
- type InvalidCertificateVersion
- func (l *InvalidCertificateVersion) CheckApplies(cert *x509.Certificate) bool
- func (l *InvalidCertificateVersion) Execute(cert *x509.Certificate) *lint.LintResult
- type NCReservedIPNet
- func (l *NCReservedIPNet) CheckApplies(c *x509.Certificate) bool
- func (l *NCReservedIPNet) Execute(c *x509.Certificate) *lint.LintResult
- type NoUnderscoreBefore1_6_2
- func (l *NoUnderscoreBefore1_6_2) CheckApplies(c *x509.Certificate) bool
- func (l *NoUnderscoreBefore1_6_2) Execute(c *x509.Certificate) *lint.LintResult
- type OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth
- func (l *OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) CheckApplies(c *x509.Certificate) bool
- func (l *OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) Execute(c *x509.Certificate) *lint.LintResult
- type OrganizationalUnitNameProhibited
- func (l *OrganizationalUnitNameProhibited) CheckApplies(c *x509.Certificate) bool
- func (l *OrganizationalUnitNameProhibited) Execute(c *x509.Certificate) *lint.LintResult
- type PolicyQualifiersOtherThanCpsNotPermitted
- func (l *PolicyQualifiersOtherThanCpsNotPermitted) CheckApplies(c *x509.Certificate) bool
- func (l *PolicyQualifiersOtherThanCpsNotPermitted) Execute(c *x509.Certificate) *lint.LintResult
- type SANDirName
- func (l *SANDirName) CheckApplies(c *x509.Certificate) bool
- func (l *SANDirName) Execute(c *x509.Certificate) *lint.LintResult
- type SANEDI
- func (l *SANEDI) CheckApplies(c *x509.Certificate) bool
- func (l *SANEDI) Execute(c *x509.Certificate) *lint.LintResult
- type SANMissing
- func (l *SANMissing) CheckApplies(c *x509.Certificate) bool
- func (l *SANMissing) Execute(c *x509.Certificate) *lint.LintResult
- type SANOtherName
- func (l *SANOtherName) CheckApplies(c *x509.Certificate) bool
- func (l *SANOtherName) Execute(c *x509.Certificate) *lint.LintResult
- type SANRegId
- func (l *SANRegId) CheckApplies(c *x509.Certificate) bool
- func (l *SANRegId) Execute(c *x509.Certificate) *lint.LintResult
- type SANReservedIP
- func (l *SANReservedIP) CheckApplies(c *x509.Certificate) bool
- func (l *SANReservedIP) Execute(c *x509.Certificate) *lint.LintResult
- type SANRfc822
- func (l *SANRfc822) CheckApplies(c *x509.Certificate) bool
- func (l *SANRfc822) Execute(c *x509.Certificate) *lint.LintResult
- type SANURI
- func (l *SANURI) CheckApplies(c *x509.Certificate) bool
- func (l *SANURI) Execute(c *x509.Certificate) *lint.LintResult
- type SubCANameConstraintsNotCritical
- func (l *SubCANameConstraintsNotCritical) CheckApplies(cert *x509.Certificate) bool
- func (l *SubCANameConstraintsNotCritical) Execute(cert *x509.Certificate) *lint.LintResult
- type SubjectContainsOrganizationalUnitNameButNoOrganizationName
- func (l *SubjectContainsOrganizationalUnitNameButNoOrganizationName) CheckApplies(cert *x509.Certificate) bool
- func (l *SubjectContainsOrganizationalUnitNameButNoOrganizationName) Execute(cert *x509.Certificate) *lint.LintResult
- type UnderscoreNotPermissibleInDNSName
- func (l *UnderscoreNotPermissibleInDNSName) CheckApplies(c *x509.Certificate) bool
- func (l *UnderscoreNotPermissibleInDNSName) Execute(c *x509.Certificate) *lint.LintResult
- type UnderscorePermissibleInDNSNameIfValidWhenReplaced
- func (l *UnderscorePermissibleInDNSNameIfValidWhenReplaced) CheckApplies(c *x509.Certificate) bool
- func (l *UnderscorePermissibleInDNSNameIfValidWhenReplaced) Execute(c *x509.Certificate) *lint.LintResult
- type UnderscorePresentWithTooLongValidity
Functions ¶
func NewAlgorithmObjectIdentifierEncoding ¶
func NewAlgorithmObjectIdentifierEncoding() lint.LintInterface
func NewArpaMalformedIP ¶
func NewArpaMalformedIP() lint.LintInterface
func NewArpaReservedIP ¶
func NewArpaReservedIP() lint.LintInterface
func NewBRAIAAccessLocationUnique ¶
func NewBRAIAAccessLocationUnique() lint.LintInterface
func NewBRAIAAccessMethodAllowed ¶
func NewBRAIAAccessMethodAllowed() lint.LintInterface
func NewBRAIACAIssuersHasHTTPOnly ¶
func NewBRAIACAIssuersHasHTTPOnly() lint.LintInterface
func NewBRAIAOCSPHasHTTPOnly ¶
func NewBRAIAOCSPHasHTTPOnly() lint.LintInterface
func NewCaAiaMissing ¶
func NewCaAiaMissing() lint.LintInterface
func NewCaAiaShouldNotBeMissing ¶
func NewCaAiaShouldNotBeMissing() lint.LintInterface
func NewCaCRLSignNotSet ¶
func NewCaCRLSignNotSet() lint.LintInterface
func NewCaCommonNameMissing ¶
func NewCaCommonNameMissing() lint.LintInterface
func NewCaCountryNameInvalid ¶
func NewCaCountryNameInvalid() lint.LintInterface
func NewCaCountryNameMissing ¶
func NewCaCountryNameMissing() lint.LintInterface
func NewCaDigSignNotSet ¶
func NewCaDigSignNotSet() lint.LintInterface
func NewCaInvalidEKU ¶
func NewCaInvalidEKU() lint.LintInterface
func NewCaIsCA ¶
func NewCaIsCA() lint.LintInterface
func NewCaKeyCertSignNotSet ¶
func NewCaKeyCertSignNotSet() lint.LintInterface
func NewCaKeyUsageMissing ¶
func NewCaKeyUsageMissing() lint.LintInterface
func NewCaKeyUsageNotCrit ¶
func NewCaKeyUsageNotCrit() lint.LintInterface
func NewCaOrganizationNameMissing ¶
func NewCaOrganizationNameMissing() lint.LintInterface
func NewCertPolicyConflictsWithLocality ¶
func NewCertPolicyConflictsWithLocality() lint.LintInterface
func NewCertPolicyConflictsWithOrg ¶
func NewCertPolicyConflictsWithOrg() lint.LintInterface
func NewCertPolicyConflictsWithPostal ¶
func NewCertPolicyConflictsWithPostal() lint.LintInterface
func NewCertPolicyConflictsWithProvince ¶
func NewCertPolicyConflictsWithProvince() lint.LintInterface
func NewCertPolicyConflictsWithStreet ¶
func NewCertPolicyConflictsWithStreet() lint.LintInterface
func NewCertPolicyIVRequiresCountry ¶
func NewCertPolicyIVRequiresCountry() lint.LintInterface
func NewCertPolicyIVRequiresProvinceOrLocal ¶
func NewCertPolicyIVRequiresProvinceOrLocal() lint.LintInterface
func NewCertPolicyOVRequiresCountry ¶
func NewCertPolicyOVRequiresCountry() lint.LintInterface
func NewCertPolicyOVRequiresProvinceOrLocal ¶
func NewCertPolicyOVRequiresProvinceOrLocal() lint.LintInterface
func NewCertPolicyRequiresOrg ¶
func NewCertPolicyRequiresOrg() lint.LintInterface
func NewCertPolicyRequiresPersonalName ¶
func NewCertPolicyRequiresPersonalName() lint.LintInterface
func NewCommonNames ¶
func NewCommonNames() lint.LintInterface
func NewCommonNamesSC62 ¶
func NewCommonNamesSC62() lint.LintInterface
func NewCountryNotIso ¶
func NewCountryNotIso() lint.LintInterface
func NewCrlDistribPointsNotHTTP ¶
func NewCrlDistribPointsNotHTTP() lint.LintInterface
func NewCrlHasValidReasonCode ¶
func NewCrlHasValidReasonCode() lint.RevocationListLintInterface
func NewCrlNextUpdateInvalid ¶
func NewCrlNextUpdateInvalid() lint.RevocationListLintInterface
func NewCrlReasonCodeNotCritical ¶
func NewCrlReasonCodeNotCritical() lint.RevocationListLintInterface
func NewCrlissuerMustNotBePresentInCdp ¶
func NewCrlissuerMustNotBePresentInCdp() lint.LintInterface
func NewDNSNameContainsProhibitedReservedLabel ¶
func NewDNSNameContainsProhibitedReservedLabel() lint.LintInterface
func NewDNSNameEmptyLabel ¶
func NewDNSNameEmptyLabel() lint.LintInterface
func NewDNSNameHyphenInSLD ¶
func NewDNSNameHyphenInSLD() lint.LintInterface
func NewDNSNameLabelLengthTooLong ¶
func NewDNSNameLabelLengthTooLong() lint.LintInterface
func NewDNSNameLeftLabelWildcardCheck ¶
func NewDNSNameLeftLabelWildcardCheck() lint.LintInterface
func NewDNSNameProperCharacters ¶
func NewDNSNameProperCharacters() lint.LintInterface
func NewDNSNameUnderscoreInSLD ¶
func NewDNSNameUnderscoreInSLD() lint.LintInterface
func NewDNSNameUnderscoreInTRD ¶
func NewDNSNameUnderscoreInTRD() lint.LintInterface
func NewDNSNameValidTLD ¶
func NewDNSNameValidTLD() lint.LintInterface
func NewDNSNameWildcardLeftofPublicSuffix ¶
func NewDNSNameWildcardLeftofPublicSuffix() lint.LintInterface
func NewDNSNameWildcardOnlyInLeftlabel ¶
func NewDNSNameWildcardOnlyInLeftlabel() lint.LintInterface
func NewDnsNameContainsBareIANASuffix ¶
func NewDnsNameContainsBareIANASuffix() lint.LintInterface
func NewDsaImproperSize ¶
func NewDsaImproperSize() lint.LintInterface
func NewDsaParamsMissing ¶
func NewDsaParamsMissing() lint.LintInterface
func NewDsaSubgroup ¶
func NewDsaSubgroup() lint.LintInterface
func NewDsaTooShort ¶
func NewDsaTooShort() lint.LintInterface
func NewDsaUniqueCorrectRepresentation ¶
func NewDsaUniqueCorrectRepresentation() lint.LintInterface
func NewDuplicateSubjectAttribs ¶
func NewDuplicateSubjectAttribs() lint.LintInterface
func NewDvSubjectInvalidValues ¶
func NewDvSubjectInvalidValues() lint.LintInterface
func NewEKUCrit ¶
func NewEKUCrit() lint.LintInterface
func NewEcImproperCurves ¶
func NewEcImproperCurves() lint.LintInterface
func NewExtSANCriticalWithSubjectDN ¶
func NewExtSANCriticalWithSubjectDN() lint.LintInterface
func NewExtraSubjectCommonNames ¶
func NewExtraSubjectCommonNames() lint.LintInterface
func NewIllegalChar ¶
func NewIllegalChar() lint.LintInterface
func NewInvalidCACertificatePolicies ¶
func NewInvalidCACertificatePolicies() lint.LintInterface
func NewInvalidCPSUri ¶
func NewInvalidCPSUri() lint.LintInterface
func NewInvalidCertificateVersion ¶
func NewInvalidCertificateVersion() lint.LintInterface
func NewInvalidSubjectRDNOrder ¶
func NewInvalidSubjectRDNOrder() lint.LintInterface
func NewNCReservedIPNet ¶
func NewNCReservedIPNet() lint.LintInterface
func NewNoUnderscoreBefore1_6_2 ¶
func NewNoUnderscoreBefore1_6_2() lint.LintInterface
func NewOCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth ¶
func NewOCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth() lint.LintInterface
func NewOnionNotEV ¶
func NewOnionNotEV() lint.LintInterface
func NewOnionNotValid ¶
func NewOnionNotValid() lint.LintInterface
func NewOrganizationalUnitNameProhibited ¶
func NewOrganizationalUnitNameProhibited() lint.LintInterface
func NewPolicyQualifiersOtherThanCpsNotPermitted ¶
func NewPolicyQualifiersOtherThanCpsNotPermitted() lint.LintInterface
func NewProhibitDSAUsage ¶
func NewProhibitDSAUsage() lint.LintInterface
func NewPublicKeyAllowed ¶
func NewPublicKeyAllowed() lint.LintInterface
func NewRootCAContainsCertPolicy ¶
func NewRootCAContainsCertPolicy() lint.LintInterface
func NewRootCAContainsEKU ¶
func NewRootCAContainsEKU() lint.LintInterface
func NewRootCAKeyUsageMustBeCritical ¶
func NewRootCAKeyUsageMustBeCritical() lint.LintInterface
func NewRootCAKeyUsagePresent ¶
func NewRootCAKeyUsagePresent() lint.LintInterface
func NewRootCaModSize ¶
func NewRootCaModSize() lint.LintInterface
func NewRootCaPathLenPresent ¶
func NewRootCaPathLenPresent() lint.LintInterface
func NewRsaModSmallFactor ¶
func NewRsaModSmallFactor() lint.LintInterface
func NewRsaParsedTestsExpBounds ¶
func NewRsaParsedTestsExpBounds() lint.LintInterface
func NewRsaParsedTestsExpInRange ¶
func NewRsaParsedTestsExpInRange() lint.LintInterface
func NewRsaParsedTestsKeyExpOdd ¶
func NewRsaParsedTestsKeyExpOdd() lint.LintInterface
func NewRsaParsedTestsKeyModOdd ¶
func NewRsaParsedTestsKeyModOdd() lint.LintInterface
func NewRsaParsedTestsKeySize ¶
func NewRsaParsedTestsKeySize() lint.LintInterface
func NewSANDirName ¶
func NewSANDirName() lint.LintInterface
func NewSANEDI ¶
func NewSANEDI() lint.LintInterface
func NewSANMissing ¶
func NewSANMissing() lint.LintInterface
func NewSANOtherName ¶
func NewSANOtherName() lint.LintInterface
func NewSANRegId ¶
func NewSANRegId() lint.LintInterface
func NewSANReservedIP ¶
func NewSANReservedIP() lint.LintInterface
func NewSANRfc822 ¶
func NewSANRfc822() lint.LintInterface
func NewSANURI ¶
func NewSANURI() lint.LintInterface
func NewSha1ExpireLong ¶
func NewSha1ExpireLong() lint.LintInterface
func NewSigAlgTestsSHA1 ¶
func NewSigAlgTestsSHA1() lint.LintInterface
func NewSignatureAlgorithmNotSupported ¶
func NewSignatureAlgorithmNotSupported() lint.LintInterface
func NewSubCACRLDistCrit ¶
func NewSubCACRLDistCrit() lint.LintInterface
func NewSubCACRLDistMissing ¶
func NewSubCACRLDistMissing() lint.LintInterface
func NewSubCACRLDistNoUrl ¶
func NewSubCACRLDistNoUrl() lint.LintInterface
func NewSubCACertPolicyCrit ¶
func NewSubCACertPolicyCrit() lint.LintInterface
func NewSubCACertPolicyMissing ¶
func NewSubCACertPolicyMissing() lint.LintInterface
func NewSubCAEKUCrit ¶
func NewSubCAEKUCrit() lint.LintInterface
func NewSubCAEKUMissing ¶
func NewSubCAEKUMissing() lint.LintInterface
func NewSubCAEKUValidFields ¶
func NewSubCAEKUValidFields() lint.LintInterface
func NewSubCANameConstraintsNotCritical ¶
func NewSubCANameConstraintsNotCritical() lint.LintInterface
func NewSubCRLDistNoURL ¶
func NewSubCRLDistNoURL() lint.LintInterface
func NewSubCaAIAMarkedCritical ¶
func NewSubCaAIAMarkedCritical() lint.LintInterface
func NewSubCaIssuerUrl ¶
func NewSubCaIssuerUrl() lint.LintInterface
func NewSubCaModSize ¶
func NewSubCaModSize() lint.LintInterface
func NewSubCertAIAInternalName ¶
func NewSubCertAIAInternalName() lint.LintInterface
func NewSubCertAiaMarkedCritical ¶
func NewSubCertAiaMarkedCritical() lint.LintInterface
func NewSubCertAiaMissing ¶
func NewSubCertAiaMissing() lint.LintInterface
func NewSubCertBasicConstCrit ¶
func NewSubCertBasicConstCrit() lint.LintInterface
func NewSubCertCountryNameMustAppear ¶
func NewSubCertCountryNameMustAppear() lint.LintInterface
func NewSubCertIssuerUrl ¶
func NewSubCertIssuerUrl() lint.LintInterface
func NewSubCertKeyUsageBitSet ¶
func NewSubCertKeyUsageBitSet() lint.LintInterface
func NewSubCertLocalityNameMustAppear ¶
func NewSubCertLocalityNameMustAppear() lint.LintInterface
func NewSubCertLocalityNameMustNotAppear ¶
func NewSubCertLocalityNameMustNotAppear() lint.LintInterface
func NewSubCertNotCA ¶
func NewSubCertNotCA() lint.LintInterface
func NewSubCertOcspUrl ¶
func NewSubCertOcspUrl() lint.LintInterface
func NewSubCertPolicy ¶
func NewSubCertPolicy() lint.LintInterface
func NewSubCertPolicyCrit ¶
func NewSubCertPolicyCrit() lint.LintInterface
func NewSubCertPolicyEmpty ¶
func NewSubCertPolicyEmpty() lint.LintInterface
func NewSubCertPostalCodeMustNotAppear ¶
func NewSubCertPostalCodeMustNotAppear() lint.LintInterface
func NewSubCertProvinceMustAppear ¶
func NewSubCertProvinceMustAppear() lint.LintInterface
func NewSubCertProvinceMustNotAppear ¶
func NewSubCertProvinceMustNotAppear() lint.LintInterface
func NewSubCertStreetAddressShouldNotExist ¶
func NewSubCertStreetAddressShouldNotExist() lint.LintInterface
func NewSubCertSubjectGnOrSnContainsPolicy ¶
func NewSubCertSubjectGnOrSnContainsPolicy() lint.LintInterface
func NewSubCertValidTimeLongerThan39Months ¶
func NewSubCertValidTimeLongerThan39Months() lint.LintInterface
func NewSubCertValidTimeLongerThan825Days ¶
func NewSubCertValidTimeLongerThan825Days() lint.LintInterface
func NewSubCrlDistCrit ¶
func NewSubCrlDistCrit() lint.LintInterface
func NewSubCrlSignAllowed ¶
func NewSubCrlSignAllowed() lint.LintInterface
func NewSubExtKeyUsage ¶
func NewSubExtKeyUsage() lint.LintInterface
func NewSubExtKeyUsageCheck ¶
func NewSubExtKeyUsageCheck() lint.LintInterface
func NewSubExtKeyUsageClientOrServer ¶
func NewSubExtKeyUsageClientOrServer() lint.LintInterface
func NewSubExtKeyUsageLegalUsage ¶
func NewSubExtKeyUsageLegalUsage() lint.LintInterface
func NewSubModSize ¶
func NewSubModSize() lint.LintInterface
func NewSubjectCommonNameNotExactlyFromSAN ¶
func NewSubjectCommonNameNotExactlyFromSAN() lint.LintInterface
func NewSubjectCommonNameNotFromSAN ¶
func NewSubjectCommonNameNotFromSAN() lint.LintInterface
func NewSubjectContainsOrganizationalUnitNameButNoOrganizationName ¶
func NewSubjectContainsOrganizationalUnitNameButNoOrganizationName() lint.LintInterface
func NewSubjectKeyIdNotRecommendedSubscriber ¶
func NewSubjectKeyIdNotRecommendedSubscriber() lint.LintInterface
func NewSubjectOrgUnitInCACert ¶
func NewSubjectOrgUnitInCACert() lint.LintInterface
func NewSubjectRdnsCorrectEncoding ¶
func NewSubjectRdnsCorrectEncoding() lint.LintInterface
func NewSubjectReservedIP ¶
func NewSubjectReservedIP() lint.LintInterface
func NewTorServiceDescHashInvalid ¶
func NewTorServiceDescHashInvalid() lint.LintInterface
Types ¶
type CertPolicyIVRequiresCountry ¶
type CertPolicyIVRequiresCountry struct{}
func (*CertPolicyIVRequiresCountry) CheckApplies ¶
func (l *CertPolicyIVRequiresCountry) CheckApplies(cert *x509.Certificate) bool
func (*CertPolicyIVRequiresCountry) Execute ¶
func (l *CertPolicyIVRequiresCountry) Execute(cert *x509.Certificate) *lint.LintResult
type CertPolicyIVRequiresProvinceOrLocal ¶
type CertPolicyIVRequiresProvinceOrLocal struct{}
func (*CertPolicyIVRequiresProvinceOrLocal) CheckApplies ¶
func (l *CertPolicyIVRequiresProvinceOrLocal) CheckApplies(cert *x509.Certificate) bool
func (*CertPolicyIVRequiresProvinceOrLocal) Execute ¶
func (l *CertPolicyIVRequiresProvinceOrLocal) Execute(cert *x509.Certificate) *lint.LintResult
type CertPolicyOVRequiresCountry ¶
type CertPolicyOVRequiresCountry struct{}
func (*CertPolicyOVRequiresCountry) CheckApplies ¶
func (l *CertPolicyOVRequiresCountry) CheckApplies(cert *x509.Certificate) bool
func (*CertPolicyOVRequiresCountry) Execute ¶
func (l *CertPolicyOVRequiresCountry) Execute(cert *x509.Certificate) *lint.LintResult
type CertPolicyOVRequiresProvinceOrLocal ¶
type CertPolicyOVRequiresProvinceOrLocal struct{}
func (*CertPolicyOVRequiresProvinceOrLocal) CheckApplies ¶
func (l *CertPolicyOVRequiresProvinceOrLocal) CheckApplies(cert *x509.Certificate) bool
func (*CertPolicyOVRequiresProvinceOrLocal) Execute ¶
func (l *CertPolicyOVRequiresProvinceOrLocal) Execute(cert *x509.Certificate) *lint.LintResult
type CertPolicyRequiresOrg ¶
type CertPolicyRequiresOrg struct{}
func (*CertPolicyRequiresOrg) CheckApplies ¶
func (l *CertPolicyRequiresOrg) CheckApplies(cert *x509.Certificate) bool
func (*CertPolicyRequiresOrg) Execute ¶
func (l *CertPolicyRequiresOrg) Execute(cert *x509.Certificate) *lint.LintResult
type CertPolicyRequiresPersonalName ¶
type CertPolicyRequiresPersonalName struct{}
func (*CertPolicyRequiresPersonalName) CheckApplies ¶
func (l *CertPolicyRequiresPersonalName) CheckApplies(cert *x509.Certificate) bool
func (*CertPolicyRequiresPersonalName) Execute ¶
func (l *CertPolicyRequiresPersonalName) Execute(cert *x509.Certificate) *lint.LintResult
type CrlNextUpdateInvalid ¶
type CrlNextUpdateInvalid struct { SubscriberCRL bool `comment:"Set this to false if the CRL to be linted covers CA certificates"` }
func (*CrlNextUpdateInvalid) CheckApplies ¶
func (l *CrlNextUpdateInvalid) CheckApplies(c *x509.RevocationList) bool
func (*CrlNextUpdateInvalid) Configure ¶
func (l *CrlNextUpdateInvalid) Configure() interface{}
func (*CrlNextUpdateInvalid) Execute ¶
func (l *CrlNextUpdateInvalid) Execute(c *x509.RevocationList) *lint.LintResult
type CrlissuerMustNotBePresentInCdp ¶
type CrlissuerMustNotBePresentInCdp struct{}
func (*CrlissuerMustNotBePresentInCdp) CheckApplies ¶
func (l *CrlissuerMustNotBePresentInCdp) CheckApplies(c *x509.Certificate) bool
func (*CrlissuerMustNotBePresentInCdp) Execute ¶
func (l *CrlissuerMustNotBePresentInCdp) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameContainsProhibitedReservedLabel ¶
type DNSNameContainsProhibitedReservedLabel struct{}
func (*DNSNameContainsProhibitedReservedLabel) CheckApplies ¶
func (l *DNSNameContainsProhibitedReservedLabel) CheckApplies(c *x509.Certificate) bool
func (*DNSNameContainsProhibitedReservedLabel) Execute ¶
func (l *DNSNameContainsProhibitedReservedLabel) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameEmptyLabel ¶
type DNSNameEmptyLabel struct{}
func (*DNSNameEmptyLabel) CheckApplies ¶
func (l *DNSNameEmptyLabel) CheckApplies(c *x509.Certificate) bool
func (*DNSNameEmptyLabel) Execute ¶
func (l *DNSNameEmptyLabel) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameHyphenInSLD ¶
type DNSNameHyphenInSLD struct{}
func (*DNSNameHyphenInSLD) CheckApplies ¶
func (l *DNSNameHyphenInSLD) CheckApplies(c *x509.Certificate) bool
func (*DNSNameHyphenInSLD) Execute ¶
func (l *DNSNameHyphenInSLD) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameLabelLengthTooLong ¶
type DNSNameLabelLengthTooLong struct{}
func (*DNSNameLabelLengthTooLong) CheckApplies ¶
func (l *DNSNameLabelLengthTooLong) CheckApplies(c *x509.Certificate) bool
func (*DNSNameLabelLengthTooLong) Execute ¶
func (l *DNSNameLabelLengthTooLong) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameLeftLabelWildcardCheck ¶
type DNSNameLeftLabelWildcardCheck struct{}
func (*DNSNameLeftLabelWildcardCheck) CheckApplies ¶
func (l *DNSNameLeftLabelWildcardCheck) CheckApplies(c *x509.Certificate) bool
func (*DNSNameLeftLabelWildcardCheck) Execute ¶
func (l *DNSNameLeftLabelWildcardCheck) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameProperCharacters ¶
func (*DNSNameProperCharacters) CheckApplies ¶
func (l *DNSNameProperCharacters) CheckApplies(c *x509.Certificate) bool
func (*DNSNameProperCharacters) Execute ¶
func (l *DNSNameProperCharacters) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameUnderscoreInSLD ¶
type DNSNameUnderscoreInSLD struct{}
func (*DNSNameUnderscoreInSLD) CheckApplies ¶
func (l *DNSNameUnderscoreInSLD) CheckApplies(c *x509.Certificate) bool
func (*DNSNameUnderscoreInSLD) Execute ¶
func (l *DNSNameUnderscoreInSLD) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameUnderscoreInTRD ¶
type DNSNameUnderscoreInTRD struct{}
func (*DNSNameUnderscoreInTRD) CheckApplies ¶
func (l *DNSNameUnderscoreInTRD) CheckApplies(c *x509.Certificate) bool
func (*DNSNameUnderscoreInTRD) Execute ¶
func (l *DNSNameUnderscoreInTRD) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameValidTLD ¶
type DNSNameValidTLD struct{}
func (*DNSNameValidTLD) CheckApplies ¶
func (l *DNSNameValidTLD) CheckApplies(c *x509.Certificate) bool
func (*DNSNameValidTLD) Execute ¶
func (l *DNSNameValidTLD) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameWildcardLeftofPublicSuffix ¶
type DNSNameWildcardLeftofPublicSuffix struct{}
func (*DNSNameWildcardLeftofPublicSuffix) CheckApplies ¶
func (l *DNSNameWildcardLeftofPublicSuffix) CheckApplies(c *x509.Certificate) bool
func (*DNSNameWildcardLeftofPublicSuffix) Execute ¶
func (l *DNSNameWildcardLeftofPublicSuffix) Execute(c *x509.Certificate) *lint.LintResult
type DNSNameWildcardOnlyInLeftlabel ¶
type DNSNameWildcardOnlyInLeftlabel struct{}
func (*DNSNameWildcardOnlyInLeftlabel) CheckApplies ¶
func (l *DNSNameWildcardOnlyInLeftlabel) CheckApplies(c *x509.Certificate) bool
func (*DNSNameWildcardOnlyInLeftlabel) Execute ¶
func (l *DNSNameWildcardOnlyInLeftlabel) Execute(c *x509.Certificate) *lint.LintResult
type ExtSANCriticalWithSubjectDN ¶
type ExtSANCriticalWithSubjectDN struct{}
func (*ExtSANCriticalWithSubjectDN) CheckApplies ¶
func (l *ExtSANCriticalWithSubjectDN) CheckApplies(cert *x509.Certificate) bool
func (*ExtSANCriticalWithSubjectDN) Execute ¶
func (l *ExtSANCriticalWithSubjectDN) Execute(cert *x509.Certificate) *lint.LintResult
type InvalidCertificateVersion ¶
type InvalidCertificateVersion struct{}
func (*InvalidCertificateVersion) CheckApplies ¶
func (l *InvalidCertificateVersion) CheckApplies(cert *x509.Certificate) bool
func (*InvalidCertificateVersion) Execute ¶
func (l *InvalidCertificateVersion) Execute(cert *x509.Certificate) *lint.LintResult
type NCReservedIPNet ¶
type NCReservedIPNet struct{}
func (*NCReservedIPNet) CheckApplies ¶
func (l *NCReservedIPNet) CheckApplies(c *x509.Certificate) bool
func (*NCReservedIPNet) Execute ¶
func (l *NCReservedIPNet) Execute(c *x509.Certificate) *lint.LintResult
type NoUnderscoreBefore1_6_2 ¶
type NoUnderscoreBefore1_6_2 struct{}
func (*NoUnderscoreBefore1_6_2) CheckApplies ¶
func (l *NoUnderscoreBefore1_6_2) CheckApplies(c *x509.Certificate) bool
func (*NoUnderscoreBefore1_6_2) Execute ¶
func (l *NoUnderscoreBefore1_6_2) Execute(c *x509.Certificate) *lint.LintResult
type OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth ¶
type OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth struct{}
func (*OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) CheckApplies ¶
func (l *OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) CheckApplies(c *x509.Certificate) bool
func (*OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) Execute ¶
func (l *OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) Execute(c *x509.Certificate) *lint.LintResult
type OrganizationalUnitNameProhibited ¶
type OrganizationalUnitNameProhibited struct{}
func (*OrganizationalUnitNameProhibited) CheckApplies ¶
func (l *OrganizationalUnitNameProhibited) CheckApplies(c *x509.Certificate) bool
func (*OrganizationalUnitNameProhibited) Execute ¶
func (l *OrganizationalUnitNameProhibited) Execute(c *x509.Certificate) *lint.LintResult
type PolicyQualifiersOtherThanCpsNotPermitted ¶
type PolicyQualifiersOtherThanCpsNotPermitted struct{}
func (*PolicyQualifiersOtherThanCpsNotPermitted) CheckApplies ¶
func (l *PolicyQualifiersOtherThanCpsNotPermitted) CheckApplies(c *x509.Certificate) bool
func (*PolicyQualifiersOtherThanCpsNotPermitted) Execute ¶
func (l *PolicyQualifiersOtherThanCpsNotPermitted) Execute(c *x509.Certificate) *lint.LintResult
type SANDirName ¶
type SANDirName struct{}
func (*SANDirName) CheckApplies ¶
func (l *SANDirName) CheckApplies(c *x509.Certificate) bool
func (*SANDirName) Execute ¶
func (l *SANDirName) Execute(c *x509.Certificate) *lint.LintResult
type SANEDI ¶
type SANEDI struct{}
func (*SANEDI) CheckApplies ¶
func (l *SANEDI) CheckApplies(c *x509.Certificate) bool
func (*SANEDI) Execute ¶
func (l *SANEDI) Execute(c *x509.Certificate) *lint.LintResult
type SANMissing ¶
type SANMissing struct{}
func (*SANMissing) CheckApplies ¶
func (l *SANMissing) CheckApplies(c *x509.Certificate) bool
func (*SANMissing) Execute ¶
func (l *SANMissing) Execute(c *x509.Certificate) *lint.LintResult
type SANOtherName ¶
type SANOtherName struct{}
func (*SANOtherName) CheckApplies ¶
func (l *SANOtherName) CheckApplies(c *x509.Certificate) bool
func (*SANOtherName) Execute ¶
func (l *SANOtherName) Execute(c *x509.Certificate) *lint.LintResult
type SANRegId ¶
type SANRegId struct{}
func (*SANRegId) CheckApplies ¶
func (l *SANRegId) CheckApplies(c *x509.Certificate) bool
func (*SANRegId) Execute ¶
func (l *SANRegId) Execute(c *x509.Certificate) *lint.LintResult
type SANReservedIP ¶
type SANReservedIP struct{}
func (*SANReservedIP) CheckApplies ¶
func (l *SANReservedIP) CheckApplies(c *x509.Certificate) bool
func (*SANReservedIP) Execute ¶
func (l *SANReservedIP) Execute(c *x509.Certificate) *lint.LintResult
type SANRfc822 ¶
type SANRfc822 struct{}
func (*SANRfc822) CheckApplies ¶
func (l *SANRfc822) CheckApplies(c *x509.Certificate) bool
func (*SANRfc822) Execute ¶
func (l *SANRfc822) Execute(c *x509.Certificate) *lint.LintResult
type SANURI ¶
type SANURI struct{}
func (*SANURI) CheckApplies ¶
func (l *SANURI) CheckApplies(c *x509.Certificate) bool
func (*SANURI) Execute ¶
func (l *SANURI) Execute(c *x509.Certificate) *lint.LintResult
type SubCANameConstraintsNotCritical ¶
type SubCANameConstraintsNotCritical struct{}
func (*SubCANameConstraintsNotCritical) CheckApplies ¶
func (l *SubCANameConstraintsNotCritical) CheckApplies(cert *x509.Certificate) bool
func (*SubCANameConstraintsNotCritical) Execute ¶
func (l *SubCANameConstraintsNotCritical) Execute(cert *x509.Certificate) *lint.LintResult
type SubjectContainsOrganizationalUnitNameButNoOrganizationName ¶
type SubjectContainsOrganizationalUnitNameButNoOrganizationName struct{}
func (*SubjectContainsOrganizationalUnitNameButNoOrganizationName) CheckApplies ¶
func (l *SubjectContainsOrganizationalUnitNameButNoOrganizationName) CheckApplies(cert *x509.Certificate) bool
func (*SubjectContainsOrganizationalUnitNameButNoOrganizationName) Execute ¶
func (l *SubjectContainsOrganizationalUnitNameButNoOrganizationName) Execute(cert *x509.Certificate) *lint.LintResult
type UnderscoreNotPermissibleInDNSName ¶
type UnderscoreNotPermissibleInDNSName struct{}
func (*UnderscoreNotPermissibleInDNSName) CheckApplies ¶
func (l *UnderscoreNotPermissibleInDNSName) CheckApplies(c *x509.Certificate) bool
func (*UnderscoreNotPermissibleInDNSName) Execute ¶
func (l *UnderscoreNotPermissibleInDNSName) Execute(c *x509.Certificate) *lint.LintResult
type UnderscorePermissibleInDNSNameIfValidWhenReplaced ¶
type UnderscorePermissibleInDNSNameIfValidWhenReplaced struct{}
func (*UnderscorePermissibleInDNSNameIfValidWhenReplaced) CheckApplies ¶
func (l *UnderscorePermissibleInDNSNameIfValidWhenReplaced) CheckApplies(c *x509.Certificate) bool
func (*UnderscorePermissibleInDNSNameIfValidWhenReplaced) Execute ¶
func (l *UnderscorePermissibleInDNSNameIfValidWhenReplaced) Execute(c *x509.Certificate) *lint.LintResult
type UnderscorePresentWithTooLongValidity ¶
type UnderscorePresentWithTooLongValidity struct{}
func (*UnderscorePresentWithTooLongValidity) CheckApplies ¶
func (l *UnderscorePresentWithTooLongValidity) CheckApplies(c *x509.Certificate) bool
func (*UnderscorePresentWithTooLongValidity) Execute ¶
func (l *UnderscorePresentWithTooLongValidity) Execute(c *x509.Certificate) *lint.LintResult
Source Files ¶
lint_aia_ca_issuers_must_have_http_only.go lint_aia_must_contain_permitted_access_method.go lint_aia_ocsp_must_have_http_only.go lint_aia_unique_locations.go lint_ca_common_name_missing.go lint_ca_country_name_invalid.go lint_ca_country_name_missing.go lint_ca_crl_sign_not_set.go lint_ca_digital_signature_not_set.go lint_ca_invalid_eku.go lint_ca_is_ca.go lint_ca_key_cert_sign_not_set.go lint_ca_key_usage_missing.go lint_ca_key_usage_not_critical.go lint_ca_organization_name_missing.go lint_cab_dv_conflicts_with_locality.go lint_cab_dv_conflicts_with_org.go lint_cab_dv_conflicts_with_postal.go lint_cab_dv_conflicts_with_province.go lint_cab_dv_conflicts_with_street.go lint_cab_dv_subject_invalid_values.go lint_cab_iv_requires_personal_name.go lint_cab_ov_requires_org.go lint_cabf_crl_reason_code_not_critical.go lint_cabf_crl_valid_reason_codes.go lint_cert_policy_iv_requires_country.go lint_cert_policy_iv_requires_province_or_locality.go lint_cert_policy_ov_requires_country.go lint_cert_policy_ov_requires_province_or_locality.go lint_crl_distrib_points_not_http.go lint_crl_next_update_invalid.go lint_crlissuer_must_not_be_present_in_cdp.go lint_dh_params_missing.go lint_dnsname_bad_character_in_label.go lint_dnsname_check_left_label_wildcard.go lint_dnsname_contains_bare_iana_suffix.go lint_dnsname_contains_empty_label.go lint_dnsname_contains_prohibited_reserved_label.go lint_dnsname_hyphen_in_sld.go lint_dnsname_label_too_long.go lint_dnsname_right_label_valid_tld.go lint_dnsname_underscore_in_sld.go lint_dnsname_underscore_in_trd.go lint_dnsname_wildcard_left_of_public_suffix.go lint_dnsname_wildcard_only_in_left_label.go lint_dsa_correct_order_in_subgroup.go lint_dsa_improper_modulus_or_divisor_size.go lint_dsa_shorter_than_2048_bits.go lint_dsa_unique_correct_representation.go lint_duplicate_subject_attribs.go lint_e_invalid_cps_uri.go lint_e_sub_ca_aia_missing.go lint_ec_improper_curves.go lint_eku_critical.go lint_ext_nc_intersects_reserved_ip.go lint_ext_san_contains_reserved_ip.go lint_ext_san_critical_with_subject_dn.go lint_ext_san_directory_name_present.go lint_ext_san_edi_party_name_present.go lint_ext_san_missing.go lint_ext_san_other_name_present.go lint_ext_san_registered_id_present.go lint_ext_san_rfc822_name_present.go lint_ext_san_uniform_resource_identifier_present.go lint_ext_subject_key_identifier_not_recommended_subscriber.go lint_ext_tor_service_descriptor_hash_invalid.go lint_extra_subject_common_names.go lint_invalid_ca_certificate_policies.go lint_invalid_certificate_version.go lint_invalid_subject_rdn_order.go lint_no_underscores_before_1_6_2.go lint_ocsp_id_pkix_ocsp_nocheck_ext_not_included_server_auth.go lint_old_root_ca_rsa_mod_less_than_2048_bits.go lint_old_sub_ca_rsa_mod_less_than_1024_bits.go lint_old_sub_cert_rsa_mod_less_than_1024_bits.go lint_organizational_unit_name_prohibited.go lint_policy_qualifiers_other_than_cps_not_permitted.go lint_prohibit_dsa_usage.go lint_public_key_type_not_allowed.go lint_root_ca_basic_constraints_path_len_constraint_field_present.go lint_root_ca_contains_cert_policy.go lint_root_ca_extended_key_usage_present.go lint_root_ca_key_usage_must_be_critical.go lint_root_ca_key_usage_present.go lint_rsa_mod_factors_smaller_than_752_bits.go lint_rsa_mod_less_than_2048_bits.go lint_rsa_mod_not_odd.go lint_rsa_public_exponent_not_in_range.go lint_rsa_public_exponent_not_odd.go lint_rsa_public_exponent_too_small.go lint_san_dns_name_onion_invalid.go lint_san_dns_name_onion_not_ev_cert.go lint_signature_algorithm_not_supported.go lint_sub_ca_aia_does_not_contain_issuing_ca_url.go lint_sub_ca_aia_marked_critical.go lint_sub_ca_certificate_policies_marked_critical.go lint_sub_ca_certificate_policies_missing.go lint_sub_ca_crl_distribution_points_does_not_contain_url.go lint_sub_ca_crl_distribution_points_marked_critical.go lint_sub_ca_crl_distribution_points_missing.go lint_sub_ca_eku_critical.go lint_sub_ca_eku_missing.go lint_sub_ca_eku_valid_fields.go lint_sub_ca_name_constraints_not_critical.go lint_sub_cert_aia_contains_internal_names.go lint_sub_cert_aia_does_not_contain_issuing_ca_url.go lint_sub_cert_aia_does_not_contain_ocsp_url.go lint_sub_cert_aia_marked_critical.go lint_sub_cert_aia_missing.go lint_sub_cert_basic_constraints_not_critical.go lint_sub_cert_cert_policy_empty.go lint_sub_cert_certificate_policies_marked_critical.go lint_sub_cert_certificate_policies_missing.go lint_sub_cert_country_name_must_appear.go lint_sub_cert_crl_distribution_points_does_not_contain_url.go lint_sub_cert_crl_distribution_points_marked_critical.go lint_sub_cert_eku_check.go lint_sub_cert_eku_extra_values.go lint_sub_cert_eku_missing.go lint_sub_cert_eku_server_auth_client_auth_missing.go lint_sub_cert_gn_sn_contains_policy.go lint_sub_cert_is_ca.go lint_sub_cert_key_usage_cert_sign_bit_set.go lint_sub_cert_key_usage_crl_sign_bit_set.go lint_sub_cert_locality_name_must_appear.go lint_sub_cert_locality_name_must_not_appear.go lint_sub_cert_or_sub_ca_using_sha1.go lint_sub_cert_postal_code_prohibited.go lint_sub_cert_province_must_appear.go lint_sub_cert_province_must_not_appear.go lint_sub_cert_sha1_expiration_too_long.go lint_sub_cert_street_address_should_not_exist.go lint_sub_cert_valid_time_longer_than_39_months.go lint_sub_cert_valid_time_longer_than_825_days.go lint_subj_orgunit_in_ca_cert.go lint_subject_common_name_included.go lint_subject_common_name_included_sc62.go lint_subject_common_name_not_exactly_from_san.go lint_subject_common_name_not_from_san.go lint_subject_contains_malformed_arpa_ip.go lint_subject_contains_noninformational_value.go lint_subject_contains_organizational_unit_name_and_no_organization_name.go lint_subject_contains_reserved_arpa_ip.go lint_subject_contains_reserved_ip.go lint_subject_country_not_iso.go lint_subject_public_key_info_improper_algorithm_object_identifier_encoding.go lint_subject_rdns_correct_encoding.go lint_underscore_not_permissible_in_dnsname.go lint_underscore_permissible_in_dnsname_if_valid_when_replaced.go lint_underscore_present_with_too_long_validity.go lint_w_sub_ca_aia_missing.go
- Version
- v3.6.6 (latest)
- Published
- Apr 19, 2025
- Platform
- linux/amd64
- Imports
- 19 packages
- Last checked
- 1 week ago –
Tools for package owners.