package cabf_br

import "github.com/zmap/zlint/v3/lints/cabf_br"

Index

Functions

func NewAlgorithmObjectIdentifierEncoding 

func NewAlgorithmObjectIdentifierEncoding() lint.LintInterface

func NewArpaMalformedIP 

func NewArpaMalformedIP() lint.LintInterface

func NewArpaReservedIP 

func NewArpaReservedIP() lint.LintInterface

func NewBRAIAAccessLocationUnique 

func NewBRAIAAccessLocationUnique() lint.LintInterface

func NewBRAIAAccessMethodAllowed 

func NewBRAIAAccessMethodAllowed() lint.LintInterface

func NewBRAIACAIssuersHasHTTPOnly 

func NewBRAIACAIssuersHasHTTPOnly() lint.LintInterface

func NewBRAIAOCSPHasHTTPOnly 

func NewBRAIAOCSPHasHTTPOnly() lint.LintInterface

func NewCaAiaMissing 

func NewCaAiaMissing() lint.LintInterface

func NewCaAiaShouldNotBeMissing 

func NewCaAiaShouldNotBeMissing() lint.LintInterface

func NewCaCRLSignNotSet 

func NewCaCRLSignNotSet() lint.LintInterface

func NewCaCommonNameMissing 

func NewCaCommonNameMissing() lint.LintInterface

func NewCaCountryNameInvalid 

func NewCaCountryNameInvalid() lint.LintInterface

func NewCaCountryNameMissing 

func NewCaCountryNameMissing() lint.LintInterface

func NewCaDigSignNotSet 

func NewCaDigSignNotSet() lint.LintInterface

func NewCaInvalidEKU 

func NewCaInvalidEKU() lint.LintInterface

func NewCaIsCA 

func NewCaIsCA() lint.LintInterface

func NewCaKeyCertSignNotSet 

func NewCaKeyCertSignNotSet() lint.LintInterface

func NewCaKeyUsageMissing 

func NewCaKeyUsageMissing() lint.LintInterface

func NewCaKeyUsageNotCrit 

func NewCaKeyUsageNotCrit() lint.LintInterface

func NewCaOrganizationNameMissing 

func NewCaOrganizationNameMissing() lint.LintInterface

func NewCertPolicyConflictsWithLocality 

func NewCertPolicyConflictsWithLocality() lint.LintInterface

func NewCertPolicyConflictsWithOrg 

func NewCertPolicyConflictsWithOrg() lint.LintInterface

func NewCertPolicyConflictsWithPostal 

func NewCertPolicyConflictsWithPostal() lint.LintInterface

func NewCertPolicyConflictsWithProvince 

func NewCertPolicyConflictsWithProvince() lint.LintInterface

func NewCertPolicyConflictsWithStreet 

func NewCertPolicyConflictsWithStreet() lint.LintInterface

func NewCertPolicyIVRequiresCountry 

func NewCertPolicyIVRequiresCountry() lint.LintInterface

func NewCertPolicyIVRequiresProvinceOrLocal 

func NewCertPolicyIVRequiresProvinceOrLocal() lint.LintInterface

func NewCertPolicyOVRequiresCountry 

func NewCertPolicyOVRequiresCountry() lint.LintInterface

func NewCertPolicyOVRequiresProvinceOrLocal 

func NewCertPolicyOVRequiresProvinceOrLocal() lint.LintInterface

func NewCertPolicyRequiresOrg 

func NewCertPolicyRequiresOrg() lint.LintInterface

func NewCertPolicyRequiresPersonalName 

func NewCertPolicyRequiresPersonalName() lint.LintInterface

func NewCommonNames 

func NewCommonNames() lint.LintInterface

func NewCommonNamesSC62 

func NewCommonNamesSC62() lint.LintInterface

func NewCountryNotIso 

func NewCountryNotIso() lint.LintInterface

func NewCrlDistribPointsNotHTTP 

func NewCrlDistribPointsNotHTTP() lint.LintInterface

func NewCrlHasValidReasonCode 

func NewCrlHasValidReasonCode() lint.RevocationListLintInterface

func NewCrlNextUpdateInvalid 

func NewCrlNextUpdateInvalid() lint.RevocationListLintInterface

func NewCrlReasonCodeNotCritical 

func NewCrlReasonCodeNotCritical() lint.RevocationListLintInterface

func NewCrlissuerMustNotBePresentInCdp 

func NewCrlissuerMustNotBePresentInCdp() lint.LintInterface

func NewDNSNameContainsProhibitedReservedLabel 

func NewDNSNameContainsProhibitedReservedLabel() lint.LintInterface

func NewDNSNameEmptyLabel 

func NewDNSNameEmptyLabel() lint.LintInterface

func NewDNSNameHyphenInSLD 

func NewDNSNameHyphenInSLD() lint.LintInterface

func NewDNSNameLabelLengthTooLong 

func NewDNSNameLabelLengthTooLong() lint.LintInterface

func NewDNSNameLeftLabelWildcardCheck 

func NewDNSNameLeftLabelWildcardCheck() lint.LintInterface

func NewDNSNameProperCharacters 

func NewDNSNameProperCharacters() lint.LintInterface

func NewDNSNameUnderscoreInSLD 

func NewDNSNameUnderscoreInSLD() lint.LintInterface

func NewDNSNameUnderscoreInTRD 

func NewDNSNameUnderscoreInTRD() lint.LintInterface

func NewDNSNameValidTLD 

func NewDNSNameValidTLD() lint.LintInterface

func NewDNSNameWildcardLeftofPublicSuffix 

func NewDNSNameWildcardLeftofPublicSuffix() lint.LintInterface

func NewDNSNameWildcardOnlyInLeftlabel 

func NewDNSNameWildcardOnlyInLeftlabel() lint.LintInterface

func NewDnsNameContainsBareIANASuffix 

func NewDnsNameContainsBareIANASuffix() lint.LintInterface

func NewDsaImproperSize 

func NewDsaImproperSize() lint.LintInterface

func NewDsaParamsMissing 

func NewDsaParamsMissing() lint.LintInterface

func NewDsaSubgroup 

func NewDsaSubgroup() lint.LintInterface

func NewDsaTooShort 

func NewDsaTooShort() lint.LintInterface

func NewDsaUniqueCorrectRepresentation 

func NewDsaUniqueCorrectRepresentation() lint.LintInterface

func NewDuplicateSubjectAttribs 

func NewDuplicateSubjectAttribs() lint.LintInterface

func NewDvSubjectInvalidValues 

func NewDvSubjectInvalidValues() lint.LintInterface

func NewEKUCrit 

func NewEKUCrit() lint.LintInterface

func NewEcImproperCurves 

func NewEcImproperCurves() lint.LintInterface

func NewExtSANCriticalWithSubjectDN 

func NewExtSANCriticalWithSubjectDN() lint.LintInterface

func NewExtraSubjectCommonNames 

func NewExtraSubjectCommonNames() lint.LintInterface

func NewIllegalChar 

func NewIllegalChar() lint.LintInterface

func NewInvalidCACertificatePolicies 

func NewInvalidCACertificatePolicies() lint.LintInterface

func NewInvalidCPSUri 

func NewInvalidCPSUri() lint.LintInterface

func NewInvalidCertificateVersion 

func NewInvalidCertificateVersion() lint.LintInterface

func NewInvalidSubjectRDNOrder 

func NewInvalidSubjectRDNOrder() lint.LintInterface

func NewNCReservedIPNet 

func NewNCReservedIPNet() lint.LintInterface

func NewNoUnderscoreBefore1_6_2 

func NewNoUnderscoreBefore1_6_2() lint.LintInterface

func NewOCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth 

func NewOCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth() lint.LintInterface

func NewOnionNotEV 

func NewOnionNotEV() lint.LintInterface

func NewOnionNotValid 

func NewOnionNotValid() lint.LintInterface

func NewOrganizationalUnitNameProhibited 

func NewOrganizationalUnitNameProhibited() lint.LintInterface

func NewPolicyQualifiersOtherThanCpsNotPermitted 

func NewPolicyQualifiersOtherThanCpsNotPermitted() lint.LintInterface

func NewProhibitDSAUsage 

func NewProhibitDSAUsage() lint.LintInterface

func NewPublicKeyAllowed 

func NewPublicKeyAllowed() lint.LintInterface

func NewRootCAContainsCertPolicy 

func NewRootCAContainsCertPolicy() lint.LintInterface

func NewRootCAContainsEKU 

func NewRootCAContainsEKU() lint.LintInterface

func NewRootCAKeyUsageMustBeCritical 

func NewRootCAKeyUsageMustBeCritical() lint.LintInterface

func NewRootCAKeyUsagePresent 

func NewRootCAKeyUsagePresent() lint.LintInterface

func NewRootCaModSize 

func NewRootCaModSize() lint.LintInterface

func NewRootCaPathLenPresent 

func NewRootCaPathLenPresent() lint.LintInterface

func NewRsaModSmallFactor 

func NewRsaModSmallFactor() lint.LintInterface

func NewRsaParsedTestsExpBounds 

func NewRsaParsedTestsExpBounds() lint.LintInterface

func NewRsaParsedTestsExpInRange 

func NewRsaParsedTestsExpInRange() lint.LintInterface

func NewRsaParsedTestsKeyExpOdd 

func NewRsaParsedTestsKeyExpOdd() lint.LintInterface

func NewRsaParsedTestsKeyModOdd 

func NewRsaParsedTestsKeyModOdd() lint.LintInterface

func NewRsaParsedTestsKeySize 

func NewRsaParsedTestsKeySize() lint.LintInterface

func NewSANDirName 

func NewSANDirName() lint.LintInterface

func NewSANEDI 

func NewSANEDI() lint.LintInterface

func NewSANMissing 

func NewSANMissing() lint.LintInterface

func NewSANOtherName 

func NewSANOtherName() lint.LintInterface

func NewSANRegId 

func NewSANRegId() lint.LintInterface

func NewSANReservedIP 

func NewSANReservedIP() lint.LintInterface

func NewSANRfc822 

func NewSANRfc822() lint.LintInterface

func NewSANURI 

func NewSANURI() lint.LintInterface

func NewSha1ExpireLong 

func NewSha1ExpireLong() lint.LintInterface

func NewSigAlgTestsSHA1 

func NewSigAlgTestsSHA1() lint.LintInterface

func NewSignatureAlgorithmNotSupported 

func NewSignatureAlgorithmNotSupported() lint.LintInterface

func NewSubCACRLDistCrit 

func NewSubCACRLDistCrit() lint.LintInterface

func NewSubCACRLDistMissing 

func NewSubCACRLDistMissing() lint.LintInterface

func NewSubCACRLDistNoUrl 

func NewSubCACRLDistNoUrl() lint.LintInterface

func NewSubCACertPolicyCrit 

func NewSubCACertPolicyCrit() lint.LintInterface

func NewSubCACertPolicyMissing 

func NewSubCACertPolicyMissing() lint.LintInterface

func NewSubCAEKUCrit 

func NewSubCAEKUCrit() lint.LintInterface

func NewSubCAEKUMissing 

func NewSubCAEKUMissing() lint.LintInterface

func NewSubCAEKUValidFields 

func NewSubCAEKUValidFields() lint.LintInterface

func NewSubCANameConstraintsNotCritical 

func NewSubCANameConstraintsNotCritical() lint.LintInterface

func NewSubCRLDistNoURL 

func NewSubCRLDistNoURL() lint.LintInterface

func NewSubCaAIAMarkedCritical 

func NewSubCaAIAMarkedCritical() lint.LintInterface

func NewSubCaIssuerUrl 

func NewSubCaIssuerUrl() lint.LintInterface

func NewSubCaModSize 

func NewSubCaModSize() lint.LintInterface

func NewSubCertAIAInternalName 

func NewSubCertAIAInternalName() lint.LintInterface

func NewSubCertAiaMarkedCritical 

func NewSubCertAiaMarkedCritical() lint.LintInterface

func NewSubCertAiaMissing 

func NewSubCertAiaMissing() lint.LintInterface

func NewSubCertBasicConstCrit 

func NewSubCertBasicConstCrit() lint.LintInterface

func NewSubCertCountryNameMustAppear 

func NewSubCertCountryNameMustAppear() lint.LintInterface

func NewSubCertIssuerUrl 

func NewSubCertIssuerUrl() lint.LintInterface

func NewSubCertKeyUsageBitSet 

func NewSubCertKeyUsageBitSet() lint.LintInterface

func NewSubCertLocalityNameMustAppear 

func NewSubCertLocalityNameMustAppear() lint.LintInterface

func NewSubCertLocalityNameMustNotAppear 

func NewSubCertLocalityNameMustNotAppear() lint.LintInterface

func NewSubCertNotCA 

func NewSubCertNotCA() lint.LintInterface

func NewSubCertOcspUrl 

func NewSubCertOcspUrl() lint.LintInterface

func NewSubCertPolicy 

func NewSubCertPolicy() lint.LintInterface

func NewSubCertPolicyCrit 

func NewSubCertPolicyCrit() lint.LintInterface

func NewSubCertPolicyEmpty 

func NewSubCertPolicyEmpty() lint.LintInterface

func NewSubCertPostalCodeMustNotAppear 

func NewSubCertPostalCodeMustNotAppear() lint.LintInterface

func NewSubCertProvinceMustAppear 

func NewSubCertProvinceMustAppear() lint.LintInterface

func NewSubCertProvinceMustNotAppear 

func NewSubCertProvinceMustNotAppear() lint.LintInterface

func NewSubCertStreetAddressShouldNotExist 

func NewSubCertStreetAddressShouldNotExist() lint.LintInterface

func NewSubCertSubjectGnOrSnContainsPolicy 

func NewSubCertSubjectGnOrSnContainsPolicy() lint.LintInterface

func NewSubCertValidTimeLongerThan39Months 

func NewSubCertValidTimeLongerThan39Months() lint.LintInterface

func NewSubCertValidTimeLongerThan825Days 

func NewSubCertValidTimeLongerThan825Days() lint.LintInterface

func NewSubCrlDistCrit 

func NewSubCrlDistCrit() lint.LintInterface

func NewSubCrlSignAllowed 

func NewSubCrlSignAllowed() lint.LintInterface

func NewSubExtKeyUsage 

func NewSubExtKeyUsage() lint.LintInterface

func NewSubExtKeyUsageCheck 

func NewSubExtKeyUsageCheck() lint.LintInterface

func NewSubExtKeyUsageClientOrServer 

func NewSubExtKeyUsageClientOrServer() lint.LintInterface

func NewSubExtKeyUsageLegalUsage 

func NewSubExtKeyUsageLegalUsage() lint.LintInterface

func NewSubModSize 

func NewSubModSize() lint.LintInterface

func NewSubjectCommonNameNotExactlyFromSAN 

func NewSubjectCommonNameNotExactlyFromSAN() lint.LintInterface

func NewSubjectCommonNameNotFromSAN 

func NewSubjectCommonNameNotFromSAN() lint.LintInterface

func NewSubjectContainsOrganizationalUnitNameButNoOrganizationName 

func NewSubjectContainsOrganizationalUnitNameButNoOrganizationName() lint.LintInterface

func NewSubjectKeyIdNotRecommendedSubscriber 

func NewSubjectKeyIdNotRecommendedSubscriber() lint.LintInterface

func NewSubjectOrgUnitInCACert 

func NewSubjectOrgUnitInCACert() lint.LintInterface

func NewSubjectRdnsCorrectEncoding 

func NewSubjectRdnsCorrectEncoding() lint.LintInterface

func NewSubjectReservedIP 

func NewSubjectReservedIP() lint.LintInterface

func NewTorServiceDescHashInvalid 

func NewTorServiceDescHashInvalid() lint.LintInterface

Types

type CertPolicyIVRequiresCountry 

type CertPolicyIVRequiresCountry struct{}

func (*CertPolicyIVRequiresCountry) CheckApplies 

func (l *CertPolicyIVRequiresCountry) CheckApplies(cert *x509.Certificate) bool

func (*CertPolicyIVRequiresCountry) Execute 

func (l *CertPolicyIVRequiresCountry) Execute(cert *x509.Certificate) *lint.LintResult

type CertPolicyIVRequiresProvinceOrLocal 

type CertPolicyIVRequiresProvinceOrLocal struct{}

func (*CertPolicyIVRequiresProvinceOrLocal) CheckApplies 

func (l *CertPolicyIVRequiresProvinceOrLocal) CheckApplies(cert *x509.Certificate) bool

func (*CertPolicyIVRequiresProvinceOrLocal) Execute 

func (l *CertPolicyIVRequiresProvinceOrLocal) Execute(cert *x509.Certificate) *lint.LintResult

type CertPolicyOVRequiresCountry 

type CertPolicyOVRequiresCountry struct{}

func (*CertPolicyOVRequiresCountry) CheckApplies 

func (l *CertPolicyOVRequiresCountry) CheckApplies(cert *x509.Certificate) bool

func (*CertPolicyOVRequiresCountry) Execute 

func (l *CertPolicyOVRequiresCountry) Execute(cert *x509.Certificate) *lint.LintResult

type CertPolicyOVRequiresProvinceOrLocal 

type CertPolicyOVRequiresProvinceOrLocal struct{}

func (*CertPolicyOVRequiresProvinceOrLocal) CheckApplies 

func (l *CertPolicyOVRequiresProvinceOrLocal) CheckApplies(cert *x509.Certificate) bool

func (*CertPolicyOVRequiresProvinceOrLocal) Execute 

func (l *CertPolicyOVRequiresProvinceOrLocal) Execute(cert *x509.Certificate) *lint.LintResult

type CertPolicyRequiresOrg 

type CertPolicyRequiresOrg struct{}

func (*CertPolicyRequiresOrg) CheckApplies 

func (l *CertPolicyRequiresOrg) CheckApplies(cert *x509.Certificate) bool

func (*CertPolicyRequiresOrg) Execute 

func (l *CertPolicyRequiresOrg) Execute(cert *x509.Certificate) *lint.LintResult

type CertPolicyRequiresPersonalName 

type CertPolicyRequiresPersonalName struct{}

func (*CertPolicyRequiresPersonalName) CheckApplies 

func (l *CertPolicyRequiresPersonalName) CheckApplies(cert *x509.Certificate) bool

func (*CertPolicyRequiresPersonalName) Execute 

func (l *CertPolicyRequiresPersonalName) Execute(cert *x509.Certificate) *lint.LintResult

type CrlNextUpdateInvalid 

type CrlNextUpdateInvalid struct {
	SubscriberCRL bool `comment:"Set this to false if the CRL to be linted covers CA certificates"`
}

func (*CrlNextUpdateInvalid) CheckApplies 

func (l *CrlNextUpdateInvalid) CheckApplies(c *x509.RevocationList) bool

func (*CrlNextUpdateInvalid) Configure 

func (l *CrlNextUpdateInvalid) Configure() interface{}

func (*CrlNextUpdateInvalid) Execute 

func (l *CrlNextUpdateInvalid) Execute(c *x509.RevocationList) *lint.LintResult

type CrlissuerMustNotBePresentInCdp 

type CrlissuerMustNotBePresentInCdp struct{}

func (*CrlissuerMustNotBePresentInCdp) CheckApplies 

func (l *CrlissuerMustNotBePresentInCdp) CheckApplies(c *x509.Certificate) bool

func (*CrlissuerMustNotBePresentInCdp) Execute 

func (l *CrlissuerMustNotBePresentInCdp) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameContainsProhibitedReservedLabel 

type DNSNameContainsProhibitedReservedLabel struct{}

func (*DNSNameContainsProhibitedReservedLabel) CheckApplies 

func (l *DNSNameContainsProhibitedReservedLabel) CheckApplies(c *x509.Certificate) bool

func (*DNSNameContainsProhibitedReservedLabel) Execute 

func (l *DNSNameContainsProhibitedReservedLabel) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameEmptyLabel 

type DNSNameEmptyLabel struct{}

func (*DNSNameEmptyLabel) CheckApplies 

func (l *DNSNameEmptyLabel) CheckApplies(c *x509.Certificate) bool

func (*DNSNameEmptyLabel) Execute 

func (l *DNSNameEmptyLabel) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameHyphenInSLD 

type DNSNameHyphenInSLD struct{}

func (*DNSNameHyphenInSLD) CheckApplies 

func (l *DNSNameHyphenInSLD) CheckApplies(c *x509.Certificate) bool

func (*DNSNameHyphenInSLD) Execute 

func (l *DNSNameHyphenInSLD) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameLabelLengthTooLong 

type DNSNameLabelLengthTooLong struct{}

func (*DNSNameLabelLengthTooLong) CheckApplies 

func (l *DNSNameLabelLengthTooLong) CheckApplies(c *x509.Certificate) bool

func (*DNSNameLabelLengthTooLong) Execute 

func (l *DNSNameLabelLengthTooLong) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameLeftLabelWildcardCheck 

type DNSNameLeftLabelWildcardCheck struct{}

func (*DNSNameLeftLabelWildcardCheck) CheckApplies 

func (l *DNSNameLeftLabelWildcardCheck) CheckApplies(c *x509.Certificate) bool

func (*DNSNameLeftLabelWildcardCheck) Execute 

func (l *DNSNameLeftLabelWildcardCheck) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameProperCharacters 

type DNSNameProperCharacters struct {
	CompiledExpression *regexp.Regexp
}

func (*DNSNameProperCharacters) CheckApplies 

func (l *DNSNameProperCharacters) CheckApplies(c *x509.Certificate) bool

func (*DNSNameProperCharacters) Execute 

func (l *DNSNameProperCharacters) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameUnderscoreInSLD 

type DNSNameUnderscoreInSLD struct{}

func (*DNSNameUnderscoreInSLD) CheckApplies 

func (l *DNSNameUnderscoreInSLD) CheckApplies(c *x509.Certificate) bool

func (*DNSNameUnderscoreInSLD) Execute 

func (l *DNSNameUnderscoreInSLD) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameUnderscoreInTRD 

type DNSNameUnderscoreInTRD struct{}

func (*DNSNameUnderscoreInTRD) CheckApplies 

func (l *DNSNameUnderscoreInTRD) CheckApplies(c *x509.Certificate) bool

func (*DNSNameUnderscoreInTRD) Execute 

func (l *DNSNameUnderscoreInTRD) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameValidTLD 

type DNSNameValidTLD struct{}

func (*DNSNameValidTLD) CheckApplies 

func (l *DNSNameValidTLD) CheckApplies(c *x509.Certificate) bool

func (*DNSNameValidTLD) Execute 

func (l *DNSNameValidTLD) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameWildcardLeftofPublicSuffix 

type DNSNameWildcardLeftofPublicSuffix struct{}

func (*DNSNameWildcardLeftofPublicSuffix) CheckApplies 

func (l *DNSNameWildcardLeftofPublicSuffix) CheckApplies(c *x509.Certificate) bool

func (*DNSNameWildcardLeftofPublicSuffix) Execute 

func (l *DNSNameWildcardLeftofPublicSuffix) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameWildcardOnlyInLeftlabel 

type DNSNameWildcardOnlyInLeftlabel struct{}

func (*DNSNameWildcardOnlyInLeftlabel) CheckApplies 

func (l *DNSNameWildcardOnlyInLeftlabel) CheckApplies(c *x509.Certificate) bool

func (*DNSNameWildcardOnlyInLeftlabel) Execute 

func (l *DNSNameWildcardOnlyInLeftlabel) Execute(c *x509.Certificate) *lint.LintResult

type ExtSANCriticalWithSubjectDN 

type ExtSANCriticalWithSubjectDN struct{}

func (*ExtSANCriticalWithSubjectDN) CheckApplies 

func (l *ExtSANCriticalWithSubjectDN) CheckApplies(cert *x509.Certificate) bool

func (*ExtSANCriticalWithSubjectDN) Execute 

func (l *ExtSANCriticalWithSubjectDN) Execute(cert *x509.Certificate) *lint.LintResult

type InvalidCertificateVersion 

type InvalidCertificateVersion struct{}

func (*InvalidCertificateVersion) CheckApplies 

func (l *InvalidCertificateVersion) CheckApplies(cert *x509.Certificate) bool

func (*InvalidCertificateVersion) Execute 

func (l *InvalidCertificateVersion) Execute(cert *x509.Certificate) *lint.LintResult

type NCReservedIPNet 

type NCReservedIPNet struct{}

func (*NCReservedIPNet) CheckApplies 

func (l *NCReservedIPNet) CheckApplies(c *x509.Certificate) bool

func (*NCReservedIPNet) Execute 

func (l *NCReservedIPNet) Execute(c *x509.Certificate) *lint.LintResult

type NoUnderscoreBefore1_6_2 

type NoUnderscoreBefore1_6_2 struct{}

func (*NoUnderscoreBefore1_6_2) CheckApplies 

func (l *NoUnderscoreBefore1_6_2) CheckApplies(c *x509.Certificate) bool

func (*NoUnderscoreBefore1_6_2) Execute 

func (l *NoUnderscoreBefore1_6_2) Execute(c *x509.Certificate) *lint.LintResult

type OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth 

type OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth struct{}

func (*OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) CheckApplies 

func (l *OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) CheckApplies(c *x509.Certificate) bool

func (*OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) Execute 

func (l *OCSPIDPKIXOCSPNocheckExtNotIncludedServerAuth) Execute(c *x509.Certificate) *lint.LintResult

type OrganizationalUnitNameProhibited 

type OrganizationalUnitNameProhibited struct{}

func (*OrganizationalUnitNameProhibited) CheckApplies 

func (l *OrganizationalUnitNameProhibited) CheckApplies(c *x509.Certificate) bool

func (*OrganizationalUnitNameProhibited) Execute 

func (l *OrganizationalUnitNameProhibited) Execute(c *x509.Certificate) *lint.LintResult

type PolicyQualifiersOtherThanCpsNotPermitted 

type PolicyQualifiersOtherThanCpsNotPermitted struct{}

func (*PolicyQualifiersOtherThanCpsNotPermitted) CheckApplies 

func (l *PolicyQualifiersOtherThanCpsNotPermitted) CheckApplies(c *x509.Certificate) bool

func (*PolicyQualifiersOtherThanCpsNotPermitted) Execute 

func (l *PolicyQualifiersOtherThanCpsNotPermitted) Execute(c *x509.Certificate) *lint.LintResult

type SANDirName 

type SANDirName struct{}

func (*SANDirName) CheckApplies 

func (l *SANDirName) CheckApplies(c *x509.Certificate) bool

func (*SANDirName) Execute 

func (l *SANDirName) Execute(c *x509.Certificate) *lint.LintResult

type SANEDI 

type SANEDI struct{}

func (*SANEDI) CheckApplies 

func (l *SANEDI) CheckApplies(c *x509.Certificate) bool

func (*SANEDI) Execute 

func (l *SANEDI) Execute(c *x509.Certificate) *lint.LintResult

type SANMissing 

type SANMissing struct{}

func (*SANMissing) CheckApplies 

func (l *SANMissing) CheckApplies(c *x509.Certificate) bool

func (*SANMissing) Execute 

func (l *SANMissing) Execute(c *x509.Certificate) *lint.LintResult

type SANOtherName 

type SANOtherName struct{}

func (*SANOtherName) CheckApplies 

func (l *SANOtherName) CheckApplies(c *x509.Certificate) bool

func (*SANOtherName) Execute 

func (l *SANOtherName) Execute(c *x509.Certificate) *lint.LintResult

type SANRegId 

type SANRegId struct{}

func (*SANRegId) CheckApplies 

func (l *SANRegId) CheckApplies(c *x509.Certificate) bool

func (*SANRegId) Execute 

func (l *SANRegId) Execute(c *x509.Certificate) *lint.LintResult

type SANReservedIP 

type SANReservedIP struct{}

func (*SANReservedIP) CheckApplies 

func (l *SANReservedIP) CheckApplies(c *x509.Certificate) bool

func (*SANReservedIP) Execute 

func (l *SANReservedIP) Execute(c *x509.Certificate) *lint.LintResult

type SANRfc822 

type SANRfc822 struct{}

func (*SANRfc822) CheckApplies 

func (l *SANRfc822) CheckApplies(c *x509.Certificate) bool

func (*SANRfc822) Execute 

func (l *SANRfc822) Execute(c *x509.Certificate) *lint.LintResult

type SANURI 

type SANURI struct{}

func (*SANURI) CheckApplies 

func (l *SANURI) CheckApplies(c *x509.Certificate) bool

func (*SANURI) Execute 

func (l *SANURI) Execute(c *x509.Certificate) *lint.LintResult

type SubCANameConstraintsNotCritical 

type SubCANameConstraintsNotCritical struct{}

func (*SubCANameConstraintsNotCritical) CheckApplies 

func (l *SubCANameConstraintsNotCritical) CheckApplies(cert *x509.Certificate) bool

func (*SubCANameConstraintsNotCritical) Execute 

func (l *SubCANameConstraintsNotCritical) Execute(cert *x509.Certificate) *lint.LintResult

type SubjectContainsOrganizationalUnitNameButNoOrganizationName 

type SubjectContainsOrganizationalUnitNameButNoOrganizationName struct{}

func (*SubjectContainsOrganizationalUnitNameButNoOrganizationName) CheckApplies 

func (l *SubjectContainsOrganizationalUnitNameButNoOrganizationName) CheckApplies(cert *x509.Certificate) bool

func (*SubjectContainsOrganizationalUnitNameButNoOrganizationName) Execute 

func (l *SubjectContainsOrganizationalUnitNameButNoOrganizationName) Execute(cert *x509.Certificate) *lint.LintResult

type UnderscoreNotPermissibleInDNSName 

type UnderscoreNotPermissibleInDNSName struct{}

func (*UnderscoreNotPermissibleInDNSName) CheckApplies 

func (l *UnderscoreNotPermissibleInDNSName) CheckApplies(c *x509.Certificate) bool

func (*UnderscoreNotPermissibleInDNSName) Execute 

func (l *UnderscoreNotPermissibleInDNSName) Execute(c *x509.Certificate) *lint.LintResult

type UnderscorePermissibleInDNSNameIfValidWhenReplaced 

type UnderscorePermissibleInDNSNameIfValidWhenReplaced struct{}

func (*UnderscorePermissibleInDNSNameIfValidWhenReplaced) CheckApplies 

func (l *UnderscorePermissibleInDNSNameIfValidWhenReplaced) CheckApplies(c *x509.Certificate) bool

func (*UnderscorePermissibleInDNSNameIfValidWhenReplaced) Execute 

func (l *UnderscorePermissibleInDNSNameIfValidWhenReplaced) Execute(c *x509.Certificate) *lint.LintResult

type UnderscorePresentWithTooLongValidity 

type UnderscorePresentWithTooLongValidity struct{}

func (*UnderscorePresentWithTooLongValidity) CheckApplies 

func (l *UnderscorePresentWithTooLongValidity) CheckApplies(c *x509.Certificate) bool

func (*UnderscorePresentWithTooLongValidity) Execute 

func (l *UnderscorePresentWithTooLongValidity) Execute(c *x509.Certificate) *lint.LintResult

Source Files

lint_aia_ca_issuers_must_have_http_only.go lint_aia_must_contain_permitted_access_method.go lint_aia_ocsp_must_have_http_only.go lint_aia_unique_locations.go lint_ca_common_name_missing.go lint_ca_country_name_invalid.go lint_ca_country_name_missing.go lint_ca_crl_sign_not_set.go lint_ca_digital_signature_not_set.go lint_ca_invalid_eku.go lint_ca_is_ca.go lint_ca_key_cert_sign_not_set.go lint_ca_key_usage_missing.go lint_ca_key_usage_not_critical.go lint_ca_organization_name_missing.go lint_cab_dv_conflicts_with_locality.go lint_cab_dv_conflicts_with_org.go lint_cab_dv_conflicts_with_postal.go lint_cab_dv_conflicts_with_province.go lint_cab_dv_conflicts_with_street.go lint_cab_dv_subject_invalid_values.go lint_cab_iv_requires_personal_name.go lint_cab_ov_requires_org.go lint_cabf_crl_reason_code_not_critical.go lint_cabf_crl_valid_reason_codes.go lint_cert_policy_iv_requires_country.go lint_cert_policy_iv_requires_province_or_locality.go lint_cert_policy_ov_requires_country.go lint_cert_policy_ov_requires_province_or_locality.go lint_crl_distrib_points_not_http.go lint_crl_next_update_invalid.go lint_crlissuer_must_not_be_present_in_cdp.go lint_dh_params_missing.go lint_dnsname_bad_character_in_label.go lint_dnsname_check_left_label_wildcard.go lint_dnsname_contains_bare_iana_suffix.go lint_dnsname_contains_empty_label.go lint_dnsname_contains_prohibited_reserved_label.go lint_dnsname_hyphen_in_sld.go lint_dnsname_label_too_long.go lint_dnsname_right_label_valid_tld.go lint_dnsname_underscore_in_sld.go lint_dnsname_underscore_in_trd.go lint_dnsname_wildcard_left_of_public_suffix.go lint_dnsname_wildcard_only_in_left_label.go lint_dsa_correct_order_in_subgroup.go lint_dsa_improper_modulus_or_divisor_size.go lint_dsa_shorter_than_2048_bits.go lint_dsa_unique_correct_representation.go lint_duplicate_subject_attribs.go lint_e_invalid_cps_uri.go lint_e_sub_ca_aia_missing.go lint_ec_improper_curves.go lint_eku_critical.go lint_ext_nc_intersects_reserved_ip.go lint_ext_san_contains_reserved_ip.go lint_ext_san_critical_with_subject_dn.go lint_ext_san_directory_name_present.go lint_ext_san_edi_party_name_present.go lint_ext_san_missing.go lint_ext_san_other_name_present.go lint_ext_san_registered_id_present.go lint_ext_san_rfc822_name_present.go lint_ext_san_uniform_resource_identifier_present.go lint_ext_subject_key_identifier_not_recommended_subscriber.go lint_ext_tor_service_descriptor_hash_invalid.go lint_extra_subject_common_names.go lint_invalid_ca_certificate_policies.go lint_invalid_certificate_version.go lint_invalid_subject_rdn_order.go lint_no_underscores_before_1_6_2.go lint_ocsp_id_pkix_ocsp_nocheck_ext_not_included_server_auth.go lint_old_root_ca_rsa_mod_less_than_2048_bits.go lint_old_sub_ca_rsa_mod_less_than_1024_bits.go lint_old_sub_cert_rsa_mod_less_than_1024_bits.go lint_organizational_unit_name_prohibited.go lint_policy_qualifiers_other_than_cps_not_permitted.go lint_prohibit_dsa_usage.go lint_public_key_type_not_allowed.go lint_root_ca_basic_constraints_path_len_constraint_field_present.go lint_root_ca_contains_cert_policy.go lint_root_ca_extended_key_usage_present.go lint_root_ca_key_usage_must_be_critical.go lint_root_ca_key_usage_present.go lint_rsa_mod_factors_smaller_than_752_bits.go lint_rsa_mod_less_than_2048_bits.go lint_rsa_mod_not_odd.go lint_rsa_public_exponent_not_in_range.go lint_rsa_public_exponent_not_odd.go lint_rsa_public_exponent_too_small.go lint_san_dns_name_onion_invalid.go lint_san_dns_name_onion_not_ev_cert.go lint_signature_algorithm_not_supported.go lint_sub_ca_aia_does_not_contain_issuing_ca_url.go lint_sub_ca_aia_marked_critical.go lint_sub_ca_certificate_policies_marked_critical.go lint_sub_ca_certificate_policies_missing.go lint_sub_ca_crl_distribution_points_does_not_contain_url.go lint_sub_ca_crl_distribution_points_marked_critical.go lint_sub_ca_crl_distribution_points_missing.go lint_sub_ca_eku_critical.go lint_sub_ca_eku_missing.go lint_sub_ca_eku_valid_fields.go lint_sub_ca_name_constraints_not_critical.go lint_sub_cert_aia_contains_internal_names.go lint_sub_cert_aia_does_not_contain_issuing_ca_url.go lint_sub_cert_aia_does_not_contain_ocsp_url.go lint_sub_cert_aia_marked_critical.go lint_sub_cert_aia_missing.go lint_sub_cert_basic_constraints_not_critical.go lint_sub_cert_cert_policy_empty.go lint_sub_cert_certificate_policies_marked_critical.go lint_sub_cert_certificate_policies_missing.go lint_sub_cert_country_name_must_appear.go lint_sub_cert_crl_distribution_points_does_not_contain_url.go lint_sub_cert_crl_distribution_points_marked_critical.go lint_sub_cert_eku_check.go lint_sub_cert_eku_extra_values.go lint_sub_cert_eku_missing.go lint_sub_cert_eku_server_auth_client_auth_missing.go lint_sub_cert_gn_sn_contains_policy.go lint_sub_cert_is_ca.go lint_sub_cert_key_usage_cert_sign_bit_set.go lint_sub_cert_key_usage_crl_sign_bit_set.go lint_sub_cert_locality_name_must_appear.go lint_sub_cert_locality_name_must_not_appear.go lint_sub_cert_or_sub_ca_using_sha1.go lint_sub_cert_postal_code_prohibited.go lint_sub_cert_province_must_appear.go lint_sub_cert_province_must_not_appear.go lint_sub_cert_sha1_expiration_too_long.go lint_sub_cert_street_address_should_not_exist.go lint_sub_cert_valid_time_longer_than_39_months.go lint_sub_cert_valid_time_longer_than_825_days.go lint_subj_orgunit_in_ca_cert.go lint_subject_common_name_included.go lint_subject_common_name_included_sc62.go lint_subject_common_name_not_exactly_from_san.go lint_subject_common_name_not_from_san.go lint_subject_contains_malformed_arpa_ip.go lint_subject_contains_noninformational_value.go lint_subject_contains_organizational_unit_name_and_no_organization_name.go lint_subject_contains_reserved_arpa_ip.go lint_subject_contains_reserved_ip.go lint_subject_country_not_iso.go lint_subject_public_key_info_improper_algorithm_object_identifier_encoding.go lint_subject_rdns_correct_encoding.go lint_underscore_not_permissible_in_dnsname.go lint_underscore_permissible_in_dnsname_if_valid_when_replaced.go lint_underscore_present_with_too_long_validity.go lint_w_sub_ca_aia_missing.go

Version
v3.6.6 (latest)
Published
Apr 19, 2025
Platform
linux/amd64
Imports
19 packages
Last checked
1 week ago –

Tools for package owners.