Skip to content

qcstatem pds must have https only#935

Merged
christopher-henderson merged 42 commits intozmap:masterfrom
mtgag:e_qcstatem_pds_must_have_https_only
May 4, 2025
Merged

qcstatem pds must have https only#935
christopher-henderson merged 42 commits intozmap:masterfrom
mtgag:e_qcstatem_pds_must_have_https_only

Conversation

@mtgag
Copy link
Copy Markdown
Contributor

@mtgag mtgag commented Apr 9, 2025

This lint checks that the URL to a PDS document uses the "https" (https://) scheme. This is a requirement from the ETSI Specification ETSI EN 319 412-5 V2.4.1:

[...] As a minimum, a URL to a PDS provided in this statement shall use the "https" (https://) scheme, IETF RFC 2818 [5] or later documents updating this specification.[...]

This PR was developed in close collaboration with Deutsche Telekom Security, who also sponsored its development.

mtg and others added 30 commits February 4, 2020 17:45
util: gtld_map autopull updates for 2021-10-21T07:25:20 UTC
Copy link
Copy Markdown
Member

@christopher-henderson christopher-henderson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thank you, as always, for the clear citation and tests!

It appears that you accidentally committed h which looks like the commit history of the repo. If you delete that then I believe that this lint is clear to land.

qcEuPDS := &util.IdEtsiQcsQcEuPDS

ext := util.GetExtFromCert(c, util.QcStateOid)
s := util.ParseQcStatem(ext.Value, *qcEuPDS)
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit that you take the address of util.IdEtsiQcsQcEuPDS at L95 only to dereference it here

Suggested change
s := util.ParseQcStatem(ext.Value, *qcEuPDS)
s := util.ParseQcStatem(ext.Value, util.IdEtsiQcsQcEuPDS)

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thx! Your comments are addressed.

V

@christopher-henderson christopher-henderson merged commit f605149 into zmap:master May 4, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants