This repository was archived by the owner on Jun 19, 2020. It is now read-only.
This repository was archived by the owner on Jun 19, 2020. It is now read-only.
Update SHA-1 rules for OCSP responder certs #52
{{ message }}
https://github.com/awslabs/certlint/blob/7806b49251daca2d0b27c2acca8e925ad38b3bbf/lib/certlint/cablint.rb#L68-L70
For OCSP responder certs (which I guess we can detect with
EKUs == [OCSP signing]) the cutoff date is 2017, instead of 2016.