Placeholder Discussion for JZLint

[christopher-henderson]

No description provided.

[mtgag]

There is a port of zlint in Java, called jzlint. See: https://github.com/MTG-AG/jzlint. Not all zlint lints are yet implemented. Also some additional lints exist starting to cover other specifications (see e.g. #710) or lint of OCSP responses. During the port we identified a few positions in zlint (or jzlint) that may need minor refactoring. @christopher-henderson created this issue to keep track of the conversation.

[mtgag]

Maybe the best way to start on this would be to create a few pull requests. @christopher-henderson would this work for you?

[mtgag]

List of pull requests:

• Always perform e_cert_unique_identifier_version_not_2_or_3  #711
• Use help Method beforeoron instead of  #717
• Bc critical #722
• Ca field empty description #723
• Max length check applies #724
• Ecdsa ee invalid ku check applies #731
• E ext cert policy disallowed any policy qualifier refactor #732

List of issues:

• Duplicate lints about keyIdentifier in certificates #725

[zakird]

Is there anything to be done for this issue or does it make sense to close it? It looks like everything is checked off.

[mtgag]

It's been a bit quiet around jzlint lately and I think we can close this. If things come up through the use of jzlint that are worth reporting, we will address them as pull requests.