Our linting system uses a throwaway key to sign an untrusted version of the to-be-signed cert, then runs the lints over that. But this means that, when linting a self-signed cert, the signature no longer matches the embedded public key. This in turn causes a bunch of zlint's checks to think they're linting a Subordinate CA cert, rather than a Root CA cert. Change our linting system to make the lint cert appear self-signed when the input cert is intended to be self-signed. |
||
|---|---|---|
| .. | ||
| lints | ||
| linter.go | ||
| linter_test.go | ||