Package de.mtg.jzlint.lints.mozilla

Class MpAllowedEku

java.lang.Object

de.mtg.jzlint.lints.mozilla.MpAllowedEku

All Implemented Interfaces:

JavaLint

public class MpAllowedEku
extends Object
implements JavaLint

Section 5.3 - Intermediate Certificates Intermediate certificates created after January 1, 2019, with the exception of cross-certificates that share a private key with a corresponding root certificate: MUST contain an EKU extension; and, MUST NOT include the anyExtendedKeyUsage KeyPurposeId; and, * MUST NOT include both the id-kp-serverAuth and id-kp-emailProtection KeyPurposeIds in the same certificate. Note that the lint cannot distinguish cross-certificates from other intermediates.

Constructor Summary

Constructors

Constructor	Description
MpAllowedEku()

Method Summary

Modifier and Type	Method	Description
boolean	checkApplies(X509Certificate certificate)
LintResult	execute(X509Certificate certificate)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

MpAllowedEku

public MpAllowedEku()

Method Details

execute

public LintResult execute(X509Certificate certificate)

Specified by:

execute in interface JavaLint

checkApplies

public boolean checkApplies(X509Certificate certificate)

Specified by:

checkApplies in interface JavaLint