package rfc

import "github.com/zmap/zlint/v3/lints/rfc"

Index

Functions

func NewAiaNoHTTPorLDAP 

func NewAiaNoHTTPorLDAP() lint.LintInterface

func NewAuthorityKeyIdCritical 

func NewAuthorityKeyIdCritical() lint.LintInterface

func NewAuthorityKeyIdNoKeyIdField 

func NewAuthorityKeyIdNoKeyIdField() lint.LintInterface

func NewBasicConstCrit 

func NewBasicConstCrit() lint.LintInterface

func NewCaSubjectEmpty 

func NewCaSubjectEmpty() lint.LintInterface

func NewCertContainsUniqueIdentifier 

func NewCertContainsUniqueIdentifier() lint.LintInterface

func NewCertExtensionInvalidDER 

func NewCertExtensionInvalidDER() lint.LintInterface

func NewCertExtensionsVersonNot3 

func NewCertExtensionsVersonNot3() lint.LintInterface

func NewCertUniqueIdVersion 

func NewCertUniqueIdVersion() lint.LintInterface

func NewCheckKeyUsageCritical 

func NewCheckKeyUsageCritical() lint.LintInterface

func NewControlChar 

func NewControlChar() lint.LintInterface

func NewCrlHasNextUpdate 

func NewCrlHasNextUpdate() lint.RevocationListLintInterface

func NewCrlHasValidReasonCode 

func NewCrlHasValidReasonCode() lint.RevocationListLintInterface

func NewDNSNameEmptyLabel 

func NewDNSNameEmptyLabel() lint.LintInterface

func NewDNSNameHyphenInSLD 

func NewDNSNameHyphenInSLD() lint.LintInterface

func NewDNSNameLabelLengthTooLong 

func NewDNSNameLabelLengthTooLong() lint.LintInterface

func NewDNSNameUnderscoreInSLD 

func NewDNSNameUnderscoreInSLD() lint.LintInterface

func NewDNSNameUnderscoreInTRD 

func NewDNSNameUnderscoreInTRD() lint.LintInterface

func NewDistribNoLDAPorURI 

func NewDistribNoLDAPorURI() lint.LintInterface

func NewDpIncomplete 

func NewDpIncomplete() lint.LintInterface

func NewEcdsaAllowedKU 

func NewEcdsaAllowedKU() lint.LintInterface

func NewEcdsaInvalidKU 

func NewEcdsaInvalidKU() lint.LintInterface

func NewEkuBadCritical 

func NewEkuBadCritical() lint.LintInterface

func NewEmptyRevokedCertificates 

func NewEmptyRevokedCertificates() lint.RevocationListLintInterface

func NewEmptyRevokedCerts 

func NewEmptyRevokedCerts() lint.RevocationListLintInterface

func NewEmptySCTList 

func NewEmptySCTList() lint.LintInterface

func NewEmptyWithoutSAN 

func NewEmptyWithoutSAN() lint.LintInterface

func NewExplicitTextIA5String 

func NewExplicitTextIA5String() lint.LintInterface

func NewExplicitTextTooLong 

func NewExplicitTextTooLong() lint.LintInterface

func NewExplicitTextUtf8 

func NewExplicitTextUtf8() lint.LintInterface

func NewExtAiaMarkedCritical 

func NewExtAiaMarkedCritical() lint.LintInterface

func NewExtCertPolicyDuplicate 

func NewExtCertPolicyDuplicate() lint.LintInterface

func NewExtCertPolicyExplicitTextNotNFC 

func NewExtCertPolicyExplicitTextNotNFC() lint.LintInterface

func NewExtCrlDistributionMarkedCritical 

func NewExtCrlDistributionMarkedCritical() lint.LintInterface

func NewExtDuplicateExtension 

func NewExtDuplicateExtension() lint.LintInterface

func NewExtFreshestCrlMarkedCritical 

func NewExtFreshestCrlMarkedCritical() lint.LintInterface

func NewExtIANCritical 

func NewExtIANCritical() lint.LintInterface

func NewExtSANNotCritNoSubject 

func NewExtSANNotCritNoSubject() lint.LintInterface

func NewExtSANURIFormatInvalid 

func NewExtSANURIFormatInvalid() lint.LintInterface

func NewExtSANURINotIA5 

func NewExtSANURINotIA5() lint.LintInterface

func NewExtSANURIRelative 

func NewExtSANURIRelative() lint.LintInterface

func NewGeneralizedNoSeconds 

func NewGeneralizedNoSeconds() lint.LintInterface

func NewGeneralizedNotZulu 

func NewGeneralizedNotZulu() lint.LintInterface

func NewGeneralizedPre2050 

func NewGeneralizedPre2050() lint.LintInterface

func NewGeneralizedTimeFraction 

func NewGeneralizedTimeFraction() lint.LintInterface

func NewIANDNSNotIA5String 

func NewIANDNSNotIA5String() lint.LintInterface

func NewIANEmail 

func NewIANEmail() lint.LintInterface

func NewIANEmptyName 

func NewIANEmptyName() lint.LintInterface

func NewIANNoEntry 

func NewIANNoEntry() lint.LintInterface

func NewIANSpace 

func NewIANSpace() lint.LintInterface

func NewIANURIFQDNOrIP 

func NewIANURIFQDNOrIP() lint.LintInterface

func NewIANURIFormat 

func NewIANURIFormat() lint.LintInterface

func NewIANURIIA5String 

func NewIANURIIA5String() lint.LintInterface

func NewIDNMalformedUnicode 

func NewIDNMalformedUnicode() lint.LintInterface

func NewIDNNotNFC 

func NewIDNNotNFC() lint.LintInterface

func NewIncorrectKuEncoding 

func NewIncorrectKuEncoding() lint.LintInterface

func NewInhibitAnyPolicyNotCritical 

func NewInhibitAnyPolicyNotCritical() lint.LintInterface

func NewInvalidEmail 

func NewInvalidEmail() lint.LintInterface

func NewIssuerDNCountryNotPrintableString 

func NewIssuerDNCountryNotPrintableString() lint.LintInterface

func NewIssuerFieldEmpty 

func NewIssuerFieldEmpty() lint.LintInterface

func NewKUAndEKUInconsistent 

func NewKUAndEKUInconsistent() lint.LintInterface

func NewKeyUsageBitsSet 

func NewKeyUsageBitsSet() lint.LintInterface

func NewKeyUsageCertSignNoCa 

func NewKeyUsageCertSignNoCa() lint.LintInterface

func NewKeyUsageIncorrectLength 

func NewKeyUsageIncorrectLength() lint.LintInterface

func NewMismatchingSigAlg 

func NewMismatchingSigAlg() lint.LintInterface

func NewMissingCRLNumber 

func NewMissingCRLNumber() lint.RevocationListLintInterface

func NewNameConstMin 

func NewNameConstMin() lint.LintInterface

func NewNameConstraintCrit 

func NewNameConstraintCrit() lint.LintInterface

func NewNameConstraintEmpty 

func NewNameConstraintEmpty() lint.LintInterface

func NewNameConstraintMax 

func NewNameConstraintMax() lint.LintInterface

func NewNameConstraintNotCa 

func NewNameConstraintNotCa() lint.LintInterface

func NewNameConstraintNotFQDN 

func NewNameConstraintNotFQDN() lint.LintInterface

func NewNameConstraintOnEDI 

func NewNameConstraintOnEDI() lint.LintInterface

func NewNameConstraintOnRegisteredId 

func NewNameConstraintOnRegisteredId() lint.LintInterface

func NewNameConstraintOnX400 

func NewNameConstraintOnX400() lint.LintInterface

func NewNoticeRefPres 

func NewNoticeRefPres() lint.LintInterface

func NewOCSPThisUpdateNotAfterProducedAt 

func NewOCSPThisUpdateNotAfterProducedAt() lint.OcspResponseLintInterface

func NewPathLenIncluded 

func NewPathLenIncluded() lint.LintInterface

func NewPathLenNonPositive 

func NewPathLenNonPositive() lint.LintInterface

func NewPolicyConstraintsContents 

func NewPolicyConstraintsContents() lint.LintInterface

func NewPolicyConstraintsCritical 

func NewPolicyConstraintsCritical() lint.LintInterface

func NewPolicyMapAnyPolicy 

func NewPolicyMapAnyPolicy() lint.LintInterface

func NewPolicyMapCritical 

func NewPolicyMapCritical() lint.LintInterface

func NewPolicyMapMatchesCertPolicy 

func NewPolicyMapMatchesCertPolicy() lint.LintInterface

func NewPreCertWithSCTList 

func NewPreCertWithSCTList() lint.LintInterface

func NewRsaAllowedKUCa 

func NewRsaAllowedKUCa() lint.LintInterface

func NewRsaAllowedKUCaNoEncipherment 

func NewRsaAllowedKUCaNoEncipherment() lint.LintInterface

func NewRsaAllowedKUEe 

func NewRsaAllowedKUEe() lint.LintInterface

func NewRsaSPKIEncryptionParamNotNULL 

func NewRsaSPKIEncryptionParamNotNULL() lint.LintInterface

func NewRsaTBSSignatureEncryptionParamNotNULL 

func NewRsaTBSSignatureEncryptionParamNotNULL() lint.LintInterface

func NewSANDNSNotIA5String 

func NewSANDNSNotIA5String() lint.LintInterface

func NewSANDNSTooLong 

func NewSANDNSTooLong() lint.LintInterface

func NewSANEmptyName 

func NewSANEmptyName() lint.LintInterface

func NewSANIsSpaceDNS 

func NewSANIsSpaceDNS() lint.LintInterface

func NewSANNoEntry 

func NewSANNoEntry() lint.LintInterface

func NewSANURIHost 

func NewSANURIHost() lint.LintInterface

func NewSerialNumberNotPositive 

func NewSerialNumberNotPositive() lint.LintInterface

func NewSerialNumberTooLong 

func NewSerialNumberTooLong() lint.LintInterface

func NewSiaCrit 

func NewSiaCrit() lint.LintInterface

func NewSubDirAttrCrit 

func NewSubDirAttrCrit() lint.LintInterface

func NewSubjectCommonNameMaxLength 

func NewSubjectCommonNameMaxLength() lint.LintInterface

func NewSubjectDN 

func NewSubjectDN() lint.LintInterface

func NewSubjectDNCountryNotPrintableString 

func NewSubjectDNCountryNotPrintableString() lint.LintInterface

func NewSubjectDNNotPrintableCharacters 

func NewSubjectDNNotPrintableCharacters() lint.LintInterface

func NewSubjectDNSerialNumberMaxLength 

func NewSubjectDNSerialNumberMaxLength() lint.LintInterface

func NewSubjectDNSerialNumberNotPrintableString 

func NewSubjectDNSerialNumberNotPrintableString() lint.LintInterface

func NewSubjectEmailMaxLength 

func NewSubjectEmailMaxLength() lint.LintInterface

func NewSubjectGivenNameMaxLength 

func NewSubjectGivenNameMaxLength() lint.LintInterface

func NewSubjectGivenNameRecommendedMaxLength 

func NewSubjectGivenNameRecommendedMaxLength() lint.LintInterface

func NewSubjectKeyIdCritical 

func NewSubjectKeyIdCritical() lint.LintInterface

func NewSubjectKeyIdMissingCA 

func NewSubjectKeyIdMissingCA() lint.LintInterface

func NewSubjectKeyIdMissingSubscriber 

func NewSubjectKeyIdMissingSubscriber() lint.LintInterface

func NewSubjectLocalityNameMaxLength 

func NewSubjectLocalityNameMaxLength() lint.LintInterface

func NewSubjectOrganizationNameMaxLength 

func NewSubjectOrganizationNameMaxLength() lint.LintInterface

func NewSubjectOrganizationalUnitNameMaxLength 

func NewSubjectOrganizationalUnitNameMaxLength() lint.LintInterface

func NewSubjectPostalCodeMaxLength 

func NewSubjectPostalCodeMaxLength() lint.LintInterface

func NewSubjectPrintableStringBadAlpha 

func NewSubjectPrintableStringBadAlpha() lint.LintInterface

func NewSubjectStateNameMaxLength 

func NewSubjectStateNameMaxLength() lint.LintInterface

func NewSubjectStreetAddressMaxLength 

func NewSubjectStreetAddressMaxLength() lint.LintInterface

func NewSubjectSurnameMaxLength 

func NewSubjectSurnameMaxLength() lint.LintInterface

func NewSubjectSurnameRecommendedMaxLength 

func NewSubjectSurnameRecommendedMaxLength() lint.LintInterface

func NewSuperfluousKuEncoding 

func NewSuperfluousKuEncoding() lint.LintInterface

func NewUnrecommendedQualifier 

func NewUnrecommendedQualifier() lint.LintInterface

func NewUriRelative 

func NewUriRelative() lint.LintInterface

func NewUtcNoSecond 

func NewUtcNoSecond() lint.LintInterface

func NewUtcTimeGMT 

func NewUtcTimeGMT() lint.LintInterface

Types

type CertContainsUniqueIdentifier 

type CertContainsUniqueIdentifier struct{}

func (*CertContainsUniqueIdentifier) CheckApplies 

func (l *CertContainsUniqueIdentifier) CheckApplies(cert *x509.Certificate) bool

func (*CertContainsUniqueIdentifier) Execute 

func (l *CertContainsUniqueIdentifier) Execute(cert *x509.Certificate) *lint.LintResult

type CertExtensionsVersonNot3 

type CertExtensionsVersonNot3 struct{}

func (*CertExtensionsVersonNot3) CheckApplies 

func (l *CertExtensionsVersonNot3) CheckApplies(cert *x509.Certificate) bool

func (*CertExtensionsVersonNot3) Execute 

func (l *CertExtensionsVersonNot3) Execute(cert *x509.Certificate) *lint.LintResult

type Certificate 

type Certificate struct {
	TbsCertificate     TBSCertificate
	SignatureAlgorithm pkix.AlgorithmIdentifier
	SignatureValue     asn1.BitString
}

This is just plain RFC 5280

type CertificateList 

type CertificateList struct {
	TbsCertList        TBSCertList
	SignatureAlgorithm pkix.AlgorithmIdentifier
	SignatureValue     asn1.BitString
}

type DNSNameEmptyLabel 

type DNSNameEmptyLabel struct{}

func (*DNSNameEmptyLabel) CheckApplies 

func (l *DNSNameEmptyLabel) CheckApplies(c *x509.Certificate) bool

func (*DNSNameEmptyLabel) Execute 

func (l *DNSNameEmptyLabel) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameHyphenInSLD 

type DNSNameHyphenInSLD struct{}

func (*DNSNameHyphenInSLD) CheckApplies 

func (l *DNSNameHyphenInSLD) CheckApplies(c *x509.Certificate) bool

func (*DNSNameHyphenInSLD) Execute 

func (l *DNSNameHyphenInSLD) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameLabelLengthTooLong 

type DNSNameLabelLengthTooLong struct{}

func (*DNSNameLabelLengthTooLong) CheckApplies 

func (l *DNSNameLabelLengthTooLong) CheckApplies(c *x509.Certificate) bool

func (*DNSNameLabelLengthTooLong) Execute 

func (l *DNSNameLabelLengthTooLong) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameUnderscoreInSLD 

type DNSNameUnderscoreInSLD struct{}

func (*DNSNameUnderscoreInSLD) CheckApplies 

func (l *DNSNameUnderscoreInSLD) CheckApplies(c *x509.Certificate) bool

func (*DNSNameUnderscoreInSLD) Execute 

func (l *DNSNameUnderscoreInSLD) Execute(c *x509.Certificate) *lint.LintResult

type DNSNameUnderscoreInTRD 

type DNSNameUnderscoreInTRD struct{}

func (*DNSNameUnderscoreInTRD) CheckApplies 

func (l *DNSNameUnderscoreInTRD) CheckApplies(c *x509.Certificate) bool

func (*DNSNameUnderscoreInTRD) Execute 

func (l *DNSNameUnderscoreInTRD) Execute(c *x509.Certificate) *lint.LintResult

type ExtAiaMarkedCritical 

type ExtAiaMarkedCritical struct{}

func (*ExtAiaMarkedCritical) CheckApplies 

func (l *ExtAiaMarkedCritical) CheckApplies(cert *x509.Certificate) bool

func (*ExtAiaMarkedCritical) Execute 

func (l *ExtAiaMarkedCritical) Execute(cert *x509.Certificate) *lint.LintResult

type ExtCertPolicyDuplicate 

type ExtCertPolicyDuplicate struct{}

func (*ExtCertPolicyDuplicate) CheckApplies 

func (l *ExtCertPolicyDuplicate) CheckApplies(cert *x509.Certificate) bool

func (*ExtCertPolicyDuplicate) Execute 

func (l *ExtCertPolicyDuplicate) Execute(cert *x509.Certificate) *lint.LintResult

type ExtCertPolicyExplicitTextNotNFC 

type ExtCertPolicyExplicitTextNotNFC struct{}

func (*ExtCertPolicyExplicitTextNotNFC) CheckApplies 

func (l *ExtCertPolicyExplicitTextNotNFC) CheckApplies(c *x509.Certificate) bool

func (*ExtCertPolicyExplicitTextNotNFC) Execute 

func (l *ExtCertPolicyExplicitTextNotNFC) Execute(c *x509.Certificate) *lint.LintResult

type ExtCrlDistributionMarkedCritical 

type ExtCrlDistributionMarkedCritical struct{}

func (*ExtCrlDistributionMarkedCritical) CheckApplies 

func (l *ExtCrlDistributionMarkedCritical) CheckApplies(cert *x509.Certificate) bool

func (*ExtCrlDistributionMarkedCritical) Execute 

func (l *ExtCrlDistributionMarkedCritical) Execute(cert *x509.Certificate) *lint.LintResult

type ExtFreshestCrlMarkedCritical 

type ExtFreshestCrlMarkedCritical struct{}

func (*ExtFreshestCrlMarkedCritical) CheckApplies 

func (l *ExtFreshestCrlMarkedCritical) CheckApplies(cert *x509.Certificate) bool

func (*ExtFreshestCrlMarkedCritical) Execute 

func (l *ExtFreshestCrlMarkedCritical) Execute(cert *x509.Certificate) *lint.LintResult

type ExtIANCritical 

type ExtIANCritical struct{}

func (*ExtIANCritical) CheckApplies 

func (l *ExtIANCritical) CheckApplies(cert *x509.Certificate) bool

func (*ExtIANCritical) Execute 

func (l *ExtIANCritical) Execute(cert *x509.Certificate) *lint.LintResult

type Extension 

type Extension struct {
	Id asn1.ObjectIdentifier
	// This is either the 'critical' or the 'extnValue' field (see RFC 5280 section 4.1)
	// We can discriminate based on tag, since the two fields are of different ASN.1 types
	Field2 asn1.RawValue
	// If this is present, it can only be the 'extnValue' field
	// We need to be able to capture it, but we do not deal with it
	Field3 asn1.RawValue `asn1:"optional"`
}

* Modified syntax w/respect to RFC 5280, so we can detect whether * the critical field is actually present in the DER encoding

type IANDNSNotIA5String 

type IANDNSNotIA5String struct{}

func (*IANDNSNotIA5String) CheckApplies 

func (l *IANDNSNotIA5String) CheckApplies(c *x509.Certificate) bool

func (*IANDNSNotIA5String) Execute 

func (l *IANDNSNotIA5String) Execute(c *x509.Certificate) *lint.LintResult

type IANEmail 

type IANEmail struct{}

func (*IANEmail) CheckApplies 

func (l *IANEmail) CheckApplies(c *x509.Certificate) bool

func (*IANEmail) Execute 

func (l *IANEmail) Execute(c *x509.Certificate) *lint.LintResult

type IANEmptyName 

type IANEmptyName struct{}

func (*IANEmptyName) CheckApplies 

func (l *IANEmptyName) CheckApplies(c *x509.Certificate) bool

func (*IANEmptyName) Execute 

func (l *IANEmptyName) Execute(c *x509.Certificate) *lint.LintResult

type IANNoEntry 

type IANNoEntry struct{}

func (*IANNoEntry) CheckApplies 

func (l *IANNoEntry) CheckApplies(c *x509.Certificate) bool

func (*IANNoEntry) Execute 

func (l *IANNoEntry) Execute(c *x509.Certificate) *lint.LintResult

type IANSpace 

type IANSpace struct{}

func (*IANSpace) CheckApplies 

func (l *IANSpace) CheckApplies(c *x509.Certificate) bool

func (*IANSpace) Execute 

func (l *IANSpace) Execute(c *x509.Certificate) *lint.LintResult

type IANURIFQDNOrIP 

type IANURIFQDNOrIP struct{}

func (*IANURIFQDNOrIP) CheckApplies 

func (l *IANURIFQDNOrIP) CheckApplies(c *x509.Certificate) bool

func (*IANURIFQDNOrIP) Execute 

func (l *IANURIFQDNOrIP) Execute(c *x509.Certificate) *lint.LintResult

type IANURIFormat 

type IANURIFormat struct{}

func (*IANURIFormat) CheckApplies 

func (l *IANURIFormat) CheckApplies(c *x509.Certificate) bool

func (*IANURIFormat) Execute 

func (l *IANURIFormat) Execute(c *x509.Certificate) *lint.LintResult

type IANURIIA5String 

type IANURIIA5String struct{}

func (*IANURIIA5String) CheckApplies 

func (l *IANURIIA5String) CheckApplies(c *x509.Certificate) bool

func (*IANURIIA5String) Execute 

func (l *IANURIIA5String) Execute(c *x509.Certificate) *lint.LintResult

type IDNMalformedUnicode 

type IDNMalformedUnicode struct{}

func (*IDNMalformedUnicode) CheckApplies 

func (l *IDNMalformedUnicode) CheckApplies(c *x509.Certificate) bool

func (*IDNMalformedUnicode) Execute 

func (l *IDNMalformedUnicode) Execute(c *x509.Certificate) *lint.LintResult

type IDNNotNFC 

type IDNNotNFC struct{}

func (*IDNNotNFC) CheckApplies 

func (l *IDNNotNFC) CheckApplies(c *x509.Certificate) bool

func (*IDNNotNFC) Execute 

func (l *IDNNotNFC) Execute(c *x509.Certificate) *lint.LintResult

type InhibitAnyPolicyNotCritical 

type InhibitAnyPolicyNotCritical struct{}

func (*InhibitAnyPolicyNotCritical) CheckApplies 

func (l *InhibitAnyPolicyNotCritical) CheckApplies(cert *x509.Certificate) bool

func (*InhibitAnyPolicyNotCritical) Execute 

func (l *InhibitAnyPolicyNotCritical) Execute(cert *x509.Certificate) *lint.LintResult

type IssuerDNCountryNotPrintableString 

type IssuerDNCountryNotPrintableString struct{}

func (*IssuerDNCountryNotPrintableString) CheckApplies 

func (l *IssuerDNCountryNotPrintableString) CheckApplies(c *x509.Certificate) bool

func (*IssuerDNCountryNotPrintableString) Execute 

func (l *IssuerDNCountryNotPrintableString) Execute(c *x509.Certificate) *lint.LintResult

type KUAndEKUInconsistent 

type KUAndEKUInconsistent struct{}

func (*KUAndEKUInconsistent) CheckApplies 

func (l *KUAndEKUInconsistent) CheckApplies(c *x509.Certificate) bool

CheckApplies returns true when the certificate contains both a key usage extension and an extended key usage extension.

func (*KUAndEKUInconsistent) Execute 

func (l *KUAndEKUInconsistent) Execute(c *x509.Certificate) *lint.LintResult

Execute returns an Error level lint.LintResult if the purposes of the certificate being linted is not consistent with both extensions.

func (*KUAndEKUInconsistent) Initialize 

func (l *KUAndEKUInconsistent) Initialize() error

type OCSPThisUpdateNotAfterProducedAt 

type OCSPThisUpdateNotAfterProducedAt struct{}

func (OCSPThisUpdateNotAfterProducedAt) CheckApplies 

func (l OCSPThisUpdateNotAfterProducedAt) CheckApplies(c *ocsp.Response) bool

func (OCSPThisUpdateNotAfterProducedAt) Execute 

func (l OCSPThisUpdateNotAfterProducedAt) Execute(c *ocsp.Response) *lint.LintResult

type RevokedCertificate 

type RevokedCertificate struct {
	UserCertificate    *big.Int
	RevocationDate     time.Time
	CrlEntryExtensions asn1.RawValue `asn1:"optional"`
}

type SANDNSNotIA5String 

type SANDNSNotIA5String struct{}

func (*SANDNSNotIA5String) CheckApplies 

func (l *SANDNSNotIA5String) CheckApplies(c *x509.Certificate) bool

func (*SANDNSNotIA5String) Execute 

func (l *SANDNSNotIA5String) Execute(c *x509.Certificate) *lint.LintResult

type SANDNSTooLong 

type SANDNSTooLong struct{}

func (*SANDNSTooLong) CheckApplies 

func (l *SANDNSTooLong) CheckApplies(c *x509.Certificate) bool

func (*SANDNSTooLong) Execute 

func (l *SANDNSTooLong) Execute(c *x509.Certificate) *lint.LintResult

type SANEmptyName 

type SANEmptyName struct{}

func (*SANEmptyName) CheckApplies 

func (l *SANEmptyName) CheckApplies(c *x509.Certificate) bool

func (*SANEmptyName) Execute 

func (l *SANEmptyName) Execute(c *x509.Certificate) *lint.LintResult

type SANIsSpaceDNS 

type SANIsSpaceDNS struct{}

func (*SANIsSpaceDNS) CheckApplies 

func (l *SANIsSpaceDNS) CheckApplies(c *x509.Certificate) bool

func (*SANIsSpaceDNS) Execute 

func (l *SANIsSpaceDNS) Execute(c *x509.Certificate) *lint.LintResult

type SANNoEntry 

type SANNoEntry struct{}

func (*SANNoEntry) CheckApplies 

func (l *SANNoEntry) CheckApplies(c *x509.Certificate) bool

func (*SANNoEntry) Execute 

func (l *SANNoEntry) Execute(c *x509.Certificate) *lint.LintResult

type SANURIHost 

type SANURIHost struct{}

func (*SANURIHost) CheckApplies 

func (l *SANURIHost) CheckApplies(c *x509.Certificate) bool

func (*SANURIHost) Execute 

func (l *SANURIHost) Execute(c *x509.Certificate) *lint.LintResult

type SerialNumberNotPositive 

type SerialNumberNotPositive struct{}

func (*SerialNumberNotPositive) CheckApplies 

func (l *SerialNumberNotPositive) CheckApplies(cert *x509.Certificate) bool

func (*SerialNumberNotPositive) Execute 

func (l *SerialNumberNotPositive) Execute(cert *x509.Certificate) *lint.LintResult

type SubjectDNCountryNotPrintableString 

type SubjectDNCountryNotPrintableString struct{}

func (*SubjectDNCountryNotPrintableString) CheckApplies 

func (l *SubjectDNCountryNotPrintableString) CheckApplies(c *x509.Certificate) bool

func (*SubjectDNCountryNotPrintableString) Execute 

func (l *SubjectDNCountryNotPrintableString) Execute(c *x509.Certificate) *lint.LintResult

type SubjectDNSerialNumberMaxLength 

type SubjectDNSerialNumberMaxLength struct{}

func (*SubjectDNSerialNumberMaxLength) CheckApplies 

func (l *SubjectDNSerialNumberMaxLength) CheckApplies(c *x509.Certificate) bool

func (*SubjectDNSerialNumberMaxLength) Execute 

func (l *SubjectDNSerialNumberMaxLength) Execute(c *x509.Certificate) *lint.LintResult

type SubjectDNSerialNumberNotPrintableString 

type SubjectDNSerialNumberNotPrintableString struct{}

func (*SubjectDNSerialNumberNotPrintableString) CheckApplies 

func (l *SubjectDNSerialNumberNotPrintableString) CheckApplies(c *x509.Certificate) bool

func (*SubjectDNSerialNumberNotPrintableString) Execute 

func (l *SubjectDNSerialNumberNotPrintableString) Execute(c *x509.Certificate) *lint.LintResult

type SubjectGivenNameRecommendedMaxLength 

type SubjectGivenNameRecommendedMaxLength struct{}

func (*SubjectGivenNameRecommendedMaxLength) CheckApplies 

func (l *SubjectGivenNameRecommendedMaxLength) CheckApplies(c *x509.Certificate) bool

func (*SubjectGivenNameRecommendedMaxLength) Execute 

func (l *SubjectGivenNameRecommendedMaxLength) Execute(c *x509.Certificate) *lint.LintResult

type SubjectSurnameRecommendedMaxLength 

type SubjectSurnameRecommendedMaxLength struct{}

func (*SubjectSurnameRecommendedMaxLength) CheckApplies 

func (l *SubjectSurnameRecommendedMaxLength) CheckApplies(c *x509.Certificate) bool

func (*SubjectSurnameRecommendedMaxLength) Execute 

func (l *SubjectSurnameRecommendedMaxLength) Execute(c *x509.Certificate) *lint.LintResult

type TBSCertList 

type TBSCertList struct {
	Version             int `asn1:"optional"`
	Signature           pkix.AlgorithmIdentifier
	Issuer              asn1.RawValue
	ThisUpdate          time.Time
	NextUpdate          time.Time            `asn1:"optional"`
	RevokedCertificates []RevokedCertificate `asn1:"optional"`
	CrlExtensions       asn1.RawValue        `asn1:"tag:0,optional"`
}

type TBSCertificate 

type TBSCertificate struct {
	Version         int `asn1:"optional,explicit,default:0,tag:0"`
	SerialNumber    *big.Int
	SignatureAlgo   pkix.AlgorithmIdentifier
	Issuer          asn1.RawValue
	Validity        asn1.RawValue
	Subject         asn1.RawValue
	PublicKey       asn1.RawValue
	IssuerUniqueId  asn1.BitString `asn1:"optional,tag:1"`
	SubjectUniqueId asn1.BitString `asn1:"optional,tag:2"`
	Extensions      []Extension    `asn1:"omitempty,optional,explicit,tag:3"`
}

Simplified with respect to RFC 5280, as we are not interested in most fields here

Source Files

lint_basic_constraints_not_critical.go lint_ca_subject_field_empty.go lint_cert_contains_unique_identifier.go lint_cert_ext_invalid_der.go lint_cert_extensions_version_not_3.go lint_cert_unique_identifier_version_not_2_or_3.go lint_crl_empty_revoked_certificates.go lint_crl_has_authority_key_identifier.go lint_crl_has_next_update.go lint_crl_missing_crl_number.go lint_crl_revoked_certificates_field_empty.go lint_crl_valid_reason_codes.go lint_distribution_point_incomplete.go lint_distribution_point_missing_ldap_or_uri.go lint_dnsname_contains_empty_label.go lint_dnsname_hyphen_in_sld.go lint_dnsname_label_too_long.go lint_dnsname_underscore_in_sld.go lint_dnsname_underscore_in_trd.go lint_ecdsa_allowed_ku.go lint_ecdsa_ee_invalid_ku.go lint_eku_critical_improperly.go lint_empty_sct_list.go lint_ext_aia_access_location_missing.go lint_ext_aia_marked_critical.go lint_ext_authority_key_identifier_critical.go lint_ext_authority_key_identifier_no_key_identifier.go lint_ext_cert_policy_contains_noticeref.go lint_ext_cert_policy_disallowed_any_policy_qualifier.go lint_ext_cert_policy_duplicate.go lint_ext_cert_policy_explicit_text_ia5_string.go lint_ext_cert_policy_explicit_text_includes_control.go lint_ext_cert_policy_explicit_text_not_nfc.go lint_ext_cert_policy_explicit_text_not_utf8.go lint_ext_cert_policy_explicit_text_too_long.go lint_ext_crl_distribution_marked_critical.go lint_ext_duplicate_extension.go lint_ext_freshest_crl_marked_critical.go lint_ext_ian_critical.go lint_ext_ian_dns_not_ia5_string.go lint_ext_ian_empty_name.go lint_ext_ian_no_entries.go lint_ext_ian_rfc822_format_invalid.go lint_ext_ian_space_dns_name.go lint_ext_ian_uri_format_invalid.go lint_ext_ian_uri_host_not_fqdn_or_ip.go lint_ext_ian_uri_not_ia5.go lint_ext_ian_uri_relative.go lint_ext_key_usage_cert_sign_without_ca.go lint_ext_key_usage_not_critical.go lint_ext_key_usage_without_bits.go lint_ext_name_constraints_not_critical.go lint_ext_name_constraints_not_in_ca.go lint_ext_policy_constraints_empty.go lint_ext_policy_constraints_not_critical.go lint_ext_policy_map_any_policy.go lint_ext_policy_map_not_critical.go lint_ext_policy_map_not_in_cert_policy.go lint_ext_san_dns_name_too_long.go lint_ext_san_dns_not_ia5_string.go lint_ext_san_empty_name.go lint_ext_san_no_entries.go lint_ext_san_not_critical_without_subject.go lint_ext_san_rfc822_format_invalid.go lint_ext_san_space_dns_name.go lint_ext_san_uri_format_invalid.go lint_ext_san_uri_host_not_fqdn_or_ip.go lint_ext_san_uri_not_ia5.go lint_ext_san_uri_relative.go lint_ext_subject_directory_attr_critical.go lint_ext_subject_key_identifier_critical.go lint_ext_subject_key_identifier_missing_ca.go lint_ext_subject_key_identifier_missing_sub_cert.go lint_generalized_time_does_not_include_seconds.go lint_generalized_time_includes_fraction_seconds.go lint_generalized_time_not_in_zulu.go lint_idn_dnsname_malformed_unicode.go lint_idn_dnsname_must_be_nfc.go lint_incorrect_ku_encoding.go lint_inhibit_any_policy_not_critical.go lint_issuer_dn_country_not_printable_string.go lint_issuer_field_empty.go lint_key_usage_and_extended_key_usage_inconsistent.go lint_key_usage_incorrect_length.go lint_name_constraint_empty.go lint_name_constraint_maximum_not_absent.go lint_name_constraint_minimum_non_zero.go lint_name_constraint_not_fqdn.go lint_name_constraint_on_edi_party_name.go lint_name_constraint_on_registered_id.go lint_name_constraint_on_x400.go lint_ocsp_this_update_not_after_produced_at.go lint_path_len_constraint_improperly_included.go lint_path_len_constraint_zero_or_less.go lint_precert_with_sct_list.go lint_rsa_allowed_ku_ca.go lint_rsa_allowed_ku_ee.go lint_rsa_allowed_ku_no_encipherment_ca.go lint_serial_number_longer_than_20_octets.go lint_serial_number_not_positive.go lint_spki_rsa_encryption_parameter_not_null.go lint_subject_common_name_max_length.go lint_subject_dn_country_not_printable_string.go lint_subject_dn_not_printable_characters.go lint_subject_dn_serial_number_max_length.go lint_subject_dn_serial_number_not_printable_string.go lint_subject_email_max_length.go lint_subject_empty_without_san.go lint_subject_given_name_max_length.go lint_subject_given_name_recommended_max_length.go lint_subject_info_access_marked_critical.go lint_subject_locality_name_max_length.go lint_subject_not_dn.go lint_subject_organization_name_max_length.go lint_subject_organizational_unit_name_max_length.go lint_subject_postal_code_max_length.go lint_subject_printable_string_badalpha.go lint_subject_state_name_max_length.go lint_subject_street_address_max_length.go lint_subject_surname_max_length.go lint_subject_surname_recommended_max_length.go lint_superfluous_ku_encoding.go lint_tbs_signature_alg_matches_cert_signature_alg.go lint_tbs_signature_rsa_encryption_parameter_not_null.go lint_utc_time_does_not_include_seconds.go lint_utc_time_not_in_zulu.go lint_wrong_time_format_pre2050.go

Version
v3.6.6 (latest)
Published
Apr 19, 2025
Platform
linux/amd64
Imports
23 packages
Last checked
1 week ago –

Tools for package owners.