github.com/zmap/zlint@v1.1.0/lints/lint_sub_cert_locality_name_must_appear.go (about) 1 package lints 2 3 /* 4 * ZLint Copyright 2018 Regents of the University of Michigan 5 * 6 * Licensed under the Apache License, Version 2.0 (the "License"); you may not 7 * use this file except in compliance with the License. You may obtain a copy 8 * of the License at http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or 13 * implied. See the License for the specific language governing 14 * permissions and limitations under the License. 15 */ 16 17 import ( 18 "github.com/zmap/zcrypto/x509" 19 "github.com/zmap/zlint/util" 20 ) 21 22 type subCertLocalityNameMustAppear struct{} 23 24 func (l *subCertLocalityNameMustAppear) Initialize() error { 25 return nil 26 } 27 28 func (l *subCertLocalityNameMustAppear) CheckApplies(c *x509.Certificate) bool { 29 return util.IsSubscriberCert(c) 30 } 31 32 func (l *subCertLocalityNameMustAppear) Execute(c *x509.Certificate) *LintResult { 33 if len(c.Subject.Organization) > 0 || len(c.Subject.GivenName) > 0 || len(c.Subject.Surname) > 0 { 34 if len(c.Subject.Province) == 0 { 35 if len(c.Subject.Locality) == 0 { 36 return &LintResult{Status: Error} 37 } 38 } 39 } 40 return &LintResult{Status: Pass} 41 } 42 43 func init() { 44 RegisterLint(&Lint{ 45 Name: "e_sub_cert_locality_name_must_appear", 46 Description: "Subscriber Certificate: subject:localityName MUST appear if subject:organizationName, subject:givenName, or subject:surname fields are present but the subject:stateOrProvinceName field is absent.", 47 Citation: "BRs: 7.1.4.2.2", 48 Source: CABFBaselineRequirements, 49 EffectiveDate: util.CABGivenNameDate, 50 Lint: &subCertLocalityNameMustAppear{}, 51 }) 52 }