From e691573897d4d4680f3a31ae92076b0f21b7f1ef Mon Sep 17 00:00:00 2001 From: Santhan Raj Date: Tue, 29 May 2018 14:42:55 -0700 Subject: [PATCH] Update EV locality lint Since EV ver 1.6.4 and ballot 191, localityName is optional if stateOrProvinceName is present. Closes #65 --- lib/certlint/cablint.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lib/certlint/cablint.rb b/lib/certlint/cablint.rb index c204310..5b125c2 100755 --- a/lib/certlint/cablint.rb +++ b/lib/certlint/cablint.rb @@ -255,8 +255,8 @@ def self.lint(der) unless subjattrs.include? 'serialNumber' messages << 'E: EV certificates must include serialNumber in subject' end - unless subjattrs.include? 'L' - messages << 'E: EV certificates must include localityName in subject' + if !(subjattrs.include? 'L') && !(subjattrs.include? 'ST') + messages << 'E: EV certificates must include either localityName or stateOrProvinceName' end unless subjattrs.include? 'C' messages << 'E: EV certificates must include countryName in subject'