boulder/linter
Aaron Gable f7b79d07e5
Generate self-signed lint certs when linting roots (#6994)
Our linting system uses a throwaway key to sign an untrusted version of
the to-be-signed cert, then runs the lints over that. But this means
that, when linting a self-signed cert, the signature no longer matches
the embedded public key. This in turn causes a bunch of zlint's checks
to think they're linting a Subordinate CA cert, rather than a Root CA
cert.

Change our linting system to make the lint cert appear self-signed when
the input cert is intended to be self-signed.
2023-07-13 12:29:12 -07:00
..
lints Use zlint to check our CRLs (#6972) 2023-07-11 15:39:05 -07:00
linter.go Generate self-signed lint certs when linting roots (#6994) 2023-07-13 12:29:12 -07:00
linter_test.go Refactor lint library for go1.17 support (#5513) 2021-07-09 10:29:10 -07:00