github.com/zmap/zlint@v1.1.0/integration/small.config.json (about)

     1  {
     2    "CacheDir": "../data/",
     3    "Files": [
     4      {
     5        "Name": "xaa.csv",
     6        "URL": "https://github.com/zmap/zlint-test-corpus/raw/master/certificates/xaa.bz2"
     7      },
     8      {
     9        "Name": "xch.csv",
    10        "URL": "https://github.com/zmap/zlint-test-corpus/raw/master/certificates/xch.bz2"
    11      }
    12    ],
    13    "Expected": {
    14      "e_basic_constraints_not_critical": {
    15        "ErrCount": 1
    16      },
    17      "e_ca_common_name_missing": {},
    18      "e_ca_country_name_invalid": {},
    19      "e_ca_country_name_missing": {
    20        "ErrCount": 2
    21      },
    22      "e_ca_crl_sign_not_set": {},
    23      "e_ca_is_ca": {},
    24      "e_ca_key_cert_sign_not_set": {},
    25      "e_ca_key_usage_missing": {},
    26      "e_ca_key_usage_not_critical": {},
    27      "e_ca_organization_name_missing": {
    28        "ErrCount": 3
    29      },
    30      "e_ca_subject_field_empty": {},
    31      "e_cab_dv_conflicts_with_locality": {},
    32      "e_cab_dv_conflicts_with_org": {},
    33      "e_cab_dv_conflicts_with_postal": {},
    34      "e_cab_dv_conflicts_with_province": {},
    35      "e_cab_dv_conflicts_with_street": {},
    36      "e_cab_iv_requires_personal_name": {},
    37      "e_cab_ov_requires_org": {},
    38      "e_cert_contains_unique_identifier": {},
    39      "e_cert_extensions_version_not_3": {},
    40      "e_cert_policy_iv_requires_country": {},
    41      "e_cert_policy_iv_requires_province_or_locality": {},
    42      "e_cert_policy_ov_requires_country": {},
    43      "e_cert_policy_ov_requires_province_or_locality": {
    44        "ErrCount": 6
    45      },
    46      "e_cert_unique_identifier_version_not_2_or_3": {},
    47      "e_distribution_point_incomplete": {},
    48      "e_dnsname_bad_character_in_label": {
    49        "ErrCount": 4
    50      },
    51      "e_dnsname_contains_bare_iana_suffix": {},
    52      "e_dnsname_empty_label": {},
    53      "e_dnsname_hyphen_in_sld": {},
    54      "e_dnsname_label_too_long": {},
    55      "e_dnsname_left_label_wildcard_correct": {},
    56      "e_dnsname_not_valid_tld": {
    57        "ErrCount": 5
    58      },
    59      "e_dnsname_underscore_in_sld": {},
    60      "e_dnsname_wildcard_only_in_left_label": {},
    61      "e_dsa_correct_order_in_subgroup": {},
    62      "e_dsa_improper_modulus_or_divisor_size": {},
    63      "e_dsa_params_missing": {},
    64      "e_dsa_shorter_than_2048_bits": {},
    65      "e_dsa_unique_correct_representation": {},
    66      "e_ec_improper_curves": {},
    67      "e_ev_business_category_missing": {},
    68      "e_ev_country_name_missing": {},
    69      "e_ev_organization_name_missing": {},
    70      "e_ev_serial_number_missing": {},
    71      "e_ev_valid_time_too_long": {},
    72      "e_ext_aia_marked_critical": {},
    73      "e_ext_authority_key_identifier_critical": {},
    74      "e_ext_authority_key_identifier_missing": {
    75        "ErrCount": 2
    76      },
    77      "e_ext_authority_key_identifier_no_key_identifier": {
    78        "ErrCount": 3
    79      },
    80      "e_ext_cert_policy_disallowed_any_policy_qualifier": {},
    81      "e_ext_cert_policy_duplicate": {},
    82      "e_ext_cert_policy_explicit_text_ia5_string": {},
    83      "e_ext_cert_policy_explicit_text_too_long": {
    84        "ErrCount": 9
    85      },
    86      "e_ext_duplicate_extension": {},
    87      "e_ext_freshest_crl_marked_critical": {},
    88      "e_ext_ian_dns_not_ia5_string": {},
    89      "e_ext_ian_empty_name": {},
    90      "e_ext_ian_no_entries": {},
    91      "e_ext_ian_rfc822_format_invalid": {},
    92      "e_ext_ian_space_dns_name": {},
    93      "e_ext_ian_uri_format_invalid": {},
    94      "e_ext_ian_uri_host_not_fqdn_or_ip": {},
    95      "e_ext_ian_uri_not_ia5": {},
    96      "e_ext_ian_uri_relative": {},
    97      "e_ext_key_usage_cert_sign_without_ca": {},
    98      "e_ext_key_usage_without_bits": {},
    99      "e_ext_name_constraints_not_critical": {
   100        "ErrCount": 7
   101      },
   102      "e_ext_name_constraints_not_in_ca": {},
   103      "e_ext_policy_constraints_empty": {},
   104      "e_ext_policy_constraints_not_critical": {},
   105      "e_ext_policy_map_any_policy": {},
   106      "e_ext_san_contains_reserved_ip": {},
   107      "e_ext_san_directory_name_present": {
   108        "ErrCount": 21
   109      },
   110      "e_ext_san_dns_name_too_long": {},
   111      "e_ext_san_dns_not_ia5_string": {},
   112      "e_ext_san_edi_party_name_present": {},
   113      "e_ext_san_empty_name": {},
   114      "e_ext_san_missing": {
   115        "ErrCount": 2
   116      },
   117      "e_ext_san_no_entries": {},
   118      "e_ext_san_not_critical_without_subject": {},
   119      "e_ext_san_other_name_present": {},
   120      "e_ext_san_registered_id_present": {},
   121      "e_ext_san_rfc822_format_invalid": {},
   122      "e_ext_san_rfc822_name_present": {
   123        "ErrCount": 3
   124      },
   125      "e_ext_san_space_dns_name": {},
   126      "e_ext_san_uniform_resource_identifier_present": {},
   127      "e_ext_san_uri_format_invalid": {},
   128      "e_ext_san_uri_host_not_fqdn_or_ip": {},
   129      "e_ext_san_uri_not_ia5": {},
   130      "e_ext_san_uri_relative": {},
   131      "e_ext_subject_directory_attr_critical": {},
   132      "e_ext_subject_key_identifier_critical": {},
   133      "e_ext_subject_key_identifier_missing_ca": {},
   134      "e_ext_tor_service_descriptor_hash_invalid": {},
   135      "e_generalized_time_does_not_include_seconds": {},
   136      "e_generalized_time_includes_fraction_seconds": {},
   137      "e_generalized_time_not_in_zulu": {},
   138      "e_ian_bare_wildcard": {},
   139      "e_ian_dns_name_includes_null_char": {},
   140      "e_ian_dns_name_starts_with_period": {},
   141      "e_ian_wildcard_not_first": {},
   142      "e_inhibit_any_policy_not_critical": {},
   143      "e_international_dns_name_not_nfc": {},
   144      "e_international_dns_name_not_unicode": {},
   145      "e_invalid_certificate_version": {},
   146      "e_issuer_dn_country_not_printable_string": {},
   147      "e_issuer_field_empty": {},
   148      "e_name_constraint_empty": {},
   149      "e_name_constraint_maximum_not_absent": {},
   150      "e_name_constraint_minimum_non_zero": {},
   151      "e_old_root_ca_rsa_mod_less_than_2048_bits": {},
   152      "e_old_sub_ca_rsa_mod_less_than_1024_bits": {},
   153      "e_old_sub_cert_rsa_mod_less_than_1024_bits": {},
   154      "e_onion_subject_validity_time_too_large": {},
   155      "e_path_len_constraint_improperly_included": {},
   156      "e_path_len_constraint_zero_or_less": {},
   157      "e_public_key_type_not_allowed": {},
   158      "e_qcstatem_etsi_present_qcs_critical": {},
   159      "e_qcstatem_etsi_type_as_statem": {
   160        "ErrCount": 9
   161      },
   162      "e_qcstatem_mandatory_etsi_statems": {
   163        "ErrCount": 62
   164      },
   165      "e_qcstatem_qccompliance_valid": {},
   166      "e_qcstatem_qclimitvalue_valid": {},
   167      "e_qcstatem_qcpds_valid": {},
   168      "e_qcstatem_qcretentionperiod_valid": {},
   169      "e_qcstatem_qcsscd_valid": {},
   170      "e_qcstatem_qctype_valid": {},
   171      "e_root_ca_extended_key_usage_present": {},
   172      "e_root_ca_key_usage_must_be_critical": {},
   173      "e_root_ca_key_usage_present": {},
   174      "e_rsa_exp_negative": {},
   175      "e_rsa_mod_less_than_2048_bits": {
   176        "ErrCount": 1
   177      },
   178      "e_rsa_no_public_key": {},
   179      "e_rsa_public_exponent_not_odd": {},
   180      "e_rsa_public_exponent_too_small": {},
   181      "e_san_bare_wildcard": {},
   182      "e_san_dns_name_includes_null_char": {},
   183      "e_san_dns_name_onion_not_ev_cert": {},
   184      "e_san_dns_name_starts_with_period": {},
   185      "e_san_wildcard_not_first": {},
   186      "e_serial_number_longer_than_20_octets": {},
   187      "e_serial_number_not_positive": {},
   188      "e_signature_algorithm_not_supported": {},
   189      "e_spki_rsa_encryption_parameter_not_null": {},
   190      "e_sub_ca_aia_does_not_contain_ocsp_url": {
   191        "ErrCount": 7
   192      },
   193      "e_sub_ca_aia_marked_critical": {},
   194      "e_sub_ca_aia_missing": {
   195        "ErrCount": 5
   196      },
   197      "e_sub_ca_certificate_policies_missing": {
   198        "ErrCount": 1
   199      },
   200      "e_sub_ca_crl_distribution_points_does_not_contain_url": {},
   201      "e_sub_ca_crl_distribution_points_marked_critical": {},
   202      "e_sub_ca_crl_distribution_points_missing": {},
   203      "e_sub_cert_aia_does_not_contain_ocsp_url": {
   204        "ErrCount": 1
   205      },
   206      "e_sub_cert_aia_marked_critical": {},
   207      "e_sub_cert_aia_missing": {
   208        "ErrCount": 1
   209      },
   210      "e_sub_cert_cert_policy_empty": {
   211        "ErrCount": 2
   212      },
   213      "e_sub_cert_certificate_policies_missing": {
   214        "ErrCount": 2
   215      },
   216      "e_sub_cert_country_name_must_appear": {},
   217      "e_sub_cert_crl_distribution_points_does_not_contain_url": {
   218        "ErrCount": 2
   219      },
   220      "e_sub_cert_crl_distribution_points_marked_critical": {},
   221      "e_sub_cert_eku_missing": {
   222        "ErrCount": 2
   223      },
   224      "e_sub_cert_eku_server_auth_client_auth_missing": {},
   225      "e_sub_cert_given_name_surname_contains_correct_policy": {},
   226      "e_sub_cert_key_usage_cert_sign_bit_set": {},
   227      "e_sub_cert_key_usage_crl_sign_bit_set": {},
   228      "e_sub_cert_locality_name_must_appear": {
   229        "ErrCount": 15
   230      },
   231      "e_sub_cert_locality_name_must_not_appear": {
   232        "ErrCount": 1
   233      },
   234      "e_sub_cert_not_is_ca": {},
   235      "e_sub_cert_or_sub_ca_using_sha1": {
   236        "ErrCount": 1
   237      },
   238      "e_sub_cert_postal_code_must_not_appear": {
   239        "ErrCount": 1
   240      },
   241      "e_sub_cert_province_must_appear": {
   242        "ErrCount": 15
   243      },
   244      "e_sub_cert_province_must_not_appear": {
   245        "ErrCount": 1
   246      },
   247      "e_sub_cert_street_address_should_not_exist": {
   248        "ErrCount": 1
   249      },
   250      "e_sub_cert_valid_time_longer_than_39_months": {
   251        "ErrCount": 8
   252      },
   253      "e_sub_cert_valid_time_longer_than_825_days": {
   254        "ErrCount": 2
   255      },
   256      "e_subject_common_name_max_length": {},
   257      "e_subject_common_name_not_from_san": {
   258        "ErrCount": 5
   259      },
   260      "e_subject_contains_noninformational_value": {
   261        "ErrCount": 13
   262      },
   263      "e_subject_contains_reserved_arpa_ip": {},
   264      "e_subject_contains_reserved_ip": {},
   265      "e_subject_country_not_iso": {},
   266      "e_subject_dn_country_not_printable_string": {},
   267      "e_subject_dn_not_printable_characters": {
   268        "ErrCount": 3
   269      },
   270      "e_subject_dn_serial_number_max_length": {},
   271      "e_subject_dn_serial_number_not_printable_string": {
   272        "ErrCount": 1
   273      },
   274      "e_subject_email_max_length": {},
   275      "e_subject_empty_without_san": {},
   276      "e_subject_given_name_max_length": {
   277        "ErrCount": 1
   278      },
   279      "e_subject_info_access_marked_critical": {},
   280      "e_subject_locality_name_max_length": {},
   281      "e_subject_not_dn": {},
   282      "e_subject_organization_name_max_length": {
   283        "ErrCount": 4
   284      },
   285      "e_subject_organizational_unit_name_max_length": {
   286        "ErrCount": 4
   287      },
   288      "e_subject_postal_code_max_length": {
   289        "ErrCount": 1
   290      },
   291      "e_subject_printable_string_badalpha": {},
   292      "e_subject_state_name_max_length": {},
   293      "e_subject_street_address_max_length": {},
   294      "e_subject_surname_max_length": {},
   295      "e_tbs_signature_rsa_encryption_parameter_not_null": {
   296        "ErrCount": 4
   297      },
   298      "e_utc_time_does_not_include_seconds": {},
   299      "e_utc_time_not_in_zulu": {},
   300      "e_validity_time_not_positive": {},
   301      "e_wrong_time_format_pre2050": {},
   302      "n_ca_digital_signature_not_set": {
   303        "NoticeCount": 29
   304      },
   305      "n_contains_redacted_dnsname": {
   306        "NoticeCount": 8
   307      },
   308      "n_ecdsa_ee_invalid_ku": {
   309        "NoticeCount": 3
   310      },
   311      "n_multiple_subject_rdn": {},
   312      "n_san_dns_name_duplicate": {
   313        "NoticeCount": 23
   314      },
   315      "n_sub_ca_eku_missing": {
   316        "NoticeCount": 29
   317      },
   318      "n_sub_ca_eku_not_technically_constrained": {},
   319      "n_subject_common_name_included": {
   320        "NoticeCount": 64
   321      },
   322      "w_ct_sct_policy_count_unsatisfied": {
   323        "NoticeCount": 176
   324      },
   325      "w_distribution_point_missing_ldap_or_uri": {
   326        "WarnCount": 1
   327      },
   328      "w_dnsname_underscore_in_trd": {
   329        "WarnCount": 13
   330      },
   331      "w_dnsname_wildcard_left_of_public_suffix": {},
   332      "w_eku_critical_improperly": {},
   333      "w_ext_aia_access_location_missing": {
   334        "WarnCount": 11
   335      },
   336      "w_ext_cert_policy_contains_noticeref": {
   337        "WarnCount": 232
   338      },
   339      "w_ext_cert_policy_explicit_text_includes_control": {},
   340      "w_ext_cert_policy_explicit_text_not_nfc": {},
   341      "w_ext_cert_policy_explicit_text_not_utf8": {
   342        "WarnCount": 73
   343      },
   344      "w_ext_crl_distribution_marked_critical": {},
   345      "w_ext_ian_critical": {},
   346      "w_ext_key_usage_not_critical": {
   347        "WarnCount": 40
   348      },
   349      "w_ext_policy_map_not_critical": {
   350        "WarnCount": 1
   351      },
   352      "w_ext_policy_map_not_in_cert_policy": {
   353        "WarnCount": 1
   354      },
   355      "w_ext_san_critical_with_subject_dn": {
   356        "WarnCount": 1
   357      },
   358      "w_ext_subject_key_identifier_missing_sub_cert": {
   359        "WarnCount": 152
   360      },
   361      "w_ian_iana_pub_suffix_empty": {},
   362      "w_issuer_dn_leading_whitespace": {},
   363      "w_issuer_dn_trailing_whitespace": {},
   364      "w_multiple_issuer_rdn": {},
   365      "w_name_constraint_on_edi_party_name": {},
   366      "w_name_constraint_on_registered_id": {},
   367      "w_name_constraint_on_x400": {},
   368      "w_qcstatem_qcpds_lang_case": {
   369        "WarnCount": 25
   370      },
   371      "w_qcstatem_qctype_web": {},
   372      "w_root_ca_basic_constraints_path_len_constraint_field_present": {},
   373      "w_root_ca_contains_cert_policy": {},
   374      "w_rsa_mod_factors_smaller_than_752": {},
   375      "w_rsa_mod_not_odd": {},
   376      "w_rsa_public_exponent_not_in_range": {},
   377      "w_san_iana_pub_suffix_empty": {
   378        "WarnCount": 1
   379      },
   380      "w_sub_ca_aia_does_not_contain_issuing_ca_url": {
   381        "WarnCount": 23
   382      },
   383      "w_sub_ca_certificate_policies_marked_critical": {},
   384      "w_sub_ca_eku_critical": {},
   385      "w_sub_ca_name_constraints_not_critical": {
   386        "WarnCount": 6
   387      },
   388      "w_sub_cert_aia_does_not_contain_issuing_ca_url": {
   389        "WarnCount": 98
   390      },
   391      "w_sub_cert_certificate_policies_marked_critical": {},
   392      "w_sub_cert_eku_extra_values": {
   393        "WarnCount": 77
   394      },
   395      "w_sub_cert_sha1_expiration_too_long": {},
   396      "w_subject_contains_malformed_arpa_ip": {},
   397      "w_subject_dn_leading_whitespace": {},
   398      "w_subject_dn_trailing_whitespace": {
   399        "WarnCount": 4
   400      }
   401    }
   402  }