Package de.mtg.jzlint.lints.mozilla

Class MpEcdsaPubKeyEncodingCorrect

java.lang.Object

de.mtg.jzlint.lints.mozilla.MpEcdsaPubKeyEncodingCorrect

All Implemented Interfaces:

JavaLint

public class MpEcdsaPubKeyEncodingCorrect
extends Object
implements JavaLint

https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/ When ECDSA keys are encoded in a SubjectPublicKeyInfo structure, the algorithm field MUST be one of the following, as specified by RFC 5480, Section 2.1.1: The encoded AlgorithmIdentifier for a P-256 key MUST match the following hex-encoded bytes: > 301306072a8648ce3d020106082a8648ce3d030107. The encoded AlgorithmIdentifier for a P-384 key MUST match the following hex-encoded bytes: > 301006072a8648ce3d020106052b81040022. The above encodings consist of an ecPublicKey OID (1.2.840.10045.2.1) with a named curve parameter of the corresponding curve OID. Certificates MUST NOT use the implicit or specified curve forms.

Constructor Summary

Constructors

Constructor	Description
MpEcdsaPubKeyEncodingCorrect()

Method Summary

Modifier and Type	Method	Description
boolean	checkApplies(X509Certificate certificate)
LintResult	execute(X509Certificate certificate)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Details

MpEcdsaPubKeyEncodingCorrect

public MpEcdsaPubKeyEncodingCorrect()

Method Details

execute

public LintResult execute(X509Certificate certificate)

Specified by:

execute in interface JavaLint

checkApplies

public boolean checkApplies(X509Certificate certificate)

Specified by:

checkApplies in interface JavaLint