Skip to content

Add lint to check for mandatory individual identity subject attributes in non-legacy IV and SV S/MIME certificates#958

Merged
christopher-henderson merged 36 commits intozmap:masterfrom
defacto64:e_invalid_individual_identity
Jun 1, 2025
Merged

Add lint to check for mandatory individual identity subject attributes in non-legacy IV and SV S/MIME certificates#958
christopher-henderson merged 36 commits intozmap:masterfrom
defacto64:e_invalid_individual_identity

Conversation

@defacto64
Copy link
Copy Markdown
Contributor

CAB Forum's Baseline Requirements for S/MIME Certificates include the following provision:

Multipurpose and Strict Generation profiles SHALL include either subject:givenName and/or subject:surname, or the subject:pseudonym.

...for both Individual-Validated and Sponsor-Validated certificates (see sections 7.1.4.2.5 and 7.1.4.2.6 of CABF SMIME BRs).

I realized that Zlint was lacking a check for this, so I am proposing this lint to fill the gap.

defacto64 and others added 30 commits March 8, 2024 16:07
Added //nolint:all to comment block to avoid golangci-lint to complain about duplicate words in comment
Fine to me.

Co-authored-by: Christopher Henderson <[email protected]>
As per Chris Henderson's suggestion, to "improve readability".
As per Chris Henderson's suggestion.
Added CABFEV_Sec9_2_8_Date
Copy link
Copy Markdown
Member

@christopher-henderson christopher-henderson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Very clean lint, thank you.

@christopher-henderson christopher-henderson merged commit 8696d6c into zmap:master Jun 1, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants