digicert/pkilint issues and pull requests

#146 - Remove ML-KEM from sig alg list

Pull Request - State: closed - Opened by CBonnell 10 days ago

#145 - Initial PQC algorithm support

Pull Request - State: closed - Opened by CBonnell 13 days ago

#144 - Bump copyright

Pull Request - State: closed - Opened by CBonnell 13 days ago

#143 - Gracefully handle SAN decoding errors when subject emailAddress attribute is present

Pull Request - State: closed - Opened by CBonnell 13 days ago

#142 - Fix SMBR version number

Pull Request - State: closed - Opened by CBonnell about 2 months ago

#141 - Update changelog to prepare for 0.12.4 release

Pull Request - State: closed - Opened by CBonnell 2 months ago - 1 comment

#140 - Gracefully handle unsupported signature algorithms

Pull Request - State: closed - Opened by CBonnell 2 months ago

#139 - Add public key algorithm <-> Key Usage value consistency validator

Pull Request - State: closed - Opened by CBonnell 2 months ago
Labels: enhancement

#138 - lint_pkix_cert produces ASN.1 errors when certificate is version 1

Issue - State: closed - Opened by jon-oracle 2 months ago - 5 comments

#137 - Unhandled exception when certificate uses md2WithRSAEncryption

Issue - State: closed - Opened by jon-oracle 2 months ago - 1 comment
Labels: bug

#136 - DNS name validator should not throw an error if an IP address is specified

Issue - State: closed - Opened by jon-oracle 2 months ago - 2 comments

#135 - Add support for Edwards curve keys, some cleanup of the SPKI decoder

Pull Request - State: closed - Opened by CBonnell 2 months ago

#134 - Gracefully handle unsupported key types for AKI presence validator

Pull Request - State: closed - Opened by CBonnell 2 months ago

#133 - Add support for short-lived TLS certificates

Pull Request - State: closed - Opened by CBonnell 2 months ago

#132 - Add initial support for ML-DSA, SLH-DSA, and ML-KEM keys and signatures

Issue - State: closed - Opened by CBonnell 2 months ago - 1 comment
Labels: enhancement

#131 - Gracefully handle unsupported public key algorithms for AKI presence check

Issue - State: closed - Opened by CBonnell 2 months ago
Labels: bug

#130 - Add support for TLS BR short-lived certificates

Issue - State: closed - Opened by CBonnell 2 months ago
Labels: enhancement

#129 - QCP-N-QSCD 411 1(411 2), 412-2 and 412 5

Pull Request - State: open - Opened by breynders-cb 3 months ago - 4 comments

#128 - Add support for SMC-09

Pull Request - State: closed - Opened by CBonnell 3 months ago - 1 comment
Labels: enhancement

#127 - Add support for SC-79

Pull Request - State: closed - Opened by CBonnell 3 months ago - 1 comment
Labels: enhancement, blocked

#126 - Adopt Black code formatting

Pull Request - State: closed - Opened by CBonnell 3 months ago

#125 - Use Black code formatter

Issue - State: closed - Opened by CBonnell 3 months ago

#124 - Gauging interest in niche certificate profiles (ETSI / Eidas / NL)

Issue - State: closed - Opened by breynders-cb 3 months ago - 4 comments

#123 - Fix typo in finding code for multiple OIDs in TLS BR subscriber certs

Pull Request - State: closed - Opened by CBonnell 3 months ago

#122 - cabf.serverauth.ca_multiple_reserved_policy_oids duplicated

Issue - State: closed - Opened by robstradling 3 months ago - 2 comments
Labels: bug

#121 - Update CHANGELOG.md

Pull Request - State: closed - Opened by CBonnell 3 months ago

#120 - Add support for Python 3.13

Pull Request - State: closed - Opened by CBonnell 3 months ago - 1 comment

#119 - Add REST API endpoint for PKIX certificates

Pull Request - State: closed - Opened by CBonnell 3 months ago

#118 - Provide REST API for linting pkix certificates i.e. lint_pkix_cert

Issue - State: closed - Opened by dipaktilekar 4 months ago - 3 comments

#117 - Bump version for CRL REST API, update changelog

Pull Request - State: closed - Opened by CBonnell 4 months ago

#116 - Add validator to flag HTML entities in subject attribute values

Pull Request - State: closed - Opened by CBonnell 4 months ago
Labels: enhancement

#115 - Add --document-format CLI flag

Pull Request - State: closed - Opened by CBonnell 4 months ago
Labels: enhancement

#114 - Check Certificate Policies in S/MIME intermediates

Issue - State: open - Opened by robstradling 4 months ago - 1 comment
Labels: enhancement

#113 - Add REST API for linting CRLs

Pull Request - State: closed - Opened by dipaktilekar 4 months ago - 1 comment

#112 - CRL linter fixes

Pull Request - State: closed - Opened by CBonnell 4 months ago

#111 - CSV smoke test flag additional columns

Pull Request - State: closed - Opened by CBonnell 4 months ago

#110 - Add Support for File Encoding Check on CRL Lints

Issue - State: closed - Opened by AaronP-ATS 4 months ago - 3 comments

#109 - Add smoke test for finding metadata CSV files

Pull Request - State: closed - Opened by CBonnell 4 months ago

#108 - Add support for Python 3.13

Issue - State: closed - Opened by CBonnell 4 months ago - 1 comment
Labels: enhancement

#107 - Insert missing source field for S/MIME pkix.smtp_utf8_mailbox_domain_part_invalid_syntax

Pull Request - State: closed - Opened by robstradling 4 months ago - 1 comment

#106 - Duplicate Time Validator

Issue - State: closed - Opened by zzzsz 5 months ago - 1 comment
Labels: bug

#105 - NamedBitStringMinimalEncodingValidator() in CRL validator

Issue - State: closed - Opened by zzzsz 5 months ago - 2 comments

#104 - Scope of reasons for revocation

Issue - State: closed - Opened by zzzsz 5 months ago - 4 comments
Labels: bug

#103 - Duplicate registration of Validator

Issue - State: closed - Opened by zzzsz 5 months ago - 2 comments
Labels: bug

#102 - Is there a document or any others that explains the basis and source of all validators?

Issue - State: closed - Opened by zzzsz 5 months ago - 2 comments
Labels: question

#101 - Add support for S/MIME working group ballot SMC-08

Pull Request - State: closed - Opened by CBonnell 5 months ago - 1 comment

#100 - Add prohibition on the issuance of Legacy Generation S/MIME certificates

Issue - State: closed - Opened by CBonnell 5 months ago

#99 - Add check to verify that the domain part of SmtpUtf8Mailboxes do not contain U-labels

Issue - State: closed - Opened by CBonnell 5 months ago

#98 - Use pyasn1-fasder for ASN.1 DER decoding

Pull Request - State: closed - Opened by CBonnell 5 months ago

#97 - What are valid LDAP URLs?

Issue - State: closed - Opened by zzzsz 5 months ago - 2 comments
Labels: question

#96 - Add missing severity field for cabf.insignificant_attribute_value_present

Pull Request - State: closed - Opened by CBonnell 5 months ago

#95 - Add missing severity field for cabf.insignificant_attribute_value_present

Pull Request - State: closed - Opened by robstradling 5 months ago

#94 - Support enforcement of additional required and allowed extended key usages (EKUs)

Issue - State: open - Opened by christopherincanada 6 months ago
Labels: enhancement

#93 - Add test case for NCP-w type determination, update CHANGELOG

Pull Request - State: closed - Opened by CBonnell 6 months ago

#92 - NCP-w legal person and natural person final certificates are incorrectly detected as pre-certificates

Issue - State: closed - Opened by CBonnell 6 months ago - 1 comment
Labels: bug

#91 - Prepare VERSION file for next release

Pull Request - State: closed - Opened by CBonnell 6 months ago

#90 - Use correct boolean variable in two places.

Pull Request - State: closed - Opened by robstradling 6 months ago - 1 comment

#89 - Clean up certificate/CRL properties and decoder exceptions

Pull Request - State: closed - Opened by CBonnell 6 months ago

#88 - Gracefully handle mis-encoded extensions and fields exposed as properties

Issue - State: closed - Opened by CBonnell 6 months ago - 1 comment
Labels: bug

#87 - Add validator to verify that the PSD2 policy OID is only asserted in PSD2 certificates

Issue - State: closed - Opened by CBonnell 7 months ago

#86 - Support PEM-encoded OCSP responses

Issue - State: closed - Opened by CBonnell 7 months ago

#85 - Release v0.11.1

Pull Request - State: closed - Opened by CBonnell 7 months ago

#84 - Add validator to flag insignificant attribute values

Issue - State: closed - Opened by CBonnell 7 months ago

#83 - Perform case-sensitive match for ISO 3166-1 country codes

Issue - State: closed - Opened by CBonnell 7 months ago

#82 - v0.11.0

Pull Request - State: closed - Opened by CBonnell 7 months ago

#81 - Add opt-in support to use pyasn1-fasder for decoding DER

Issue - State: closed - Opened by CBonnell 7 months ago

#80 - Add support for linting ETSI website authentication certificates

Issue - State: closed - Opened by CBonnell 7 months ago

#79 - Support loading of PEM-encoded OCSP Responses

Pull Request - State: closed - Opened by robstradling 8 months ago - 11 comments

#78 - Flag invalid domain name length in GeneralName types

Pull Request - State: closed - Opened by CBonnell 8 months ago

#77 - Support enforcement of additional requirements and allowed policy identifiers

Issue - State: open - Opened by christopherincanada 9 months ago - 2 comments
Labels: enhancement

#76 - Clamp CLI exit codes

Pull Request - State: closed - Opened by CBonnell 9 months ago