Git/testssl.sh
1
0
Fork 0
mirror of https://github.com/drwetter/testssl.sh.git synced 2024-12-28 12:29:44 +01:00
Code Issues Packages Projects Releases Wiki Activity

Removed non-relevant CA's that no longer have active certificates.

Browse Source
This commit is contained in:
Sole 2023-02-02 01:13:00 +00:00
parent 9fc8c33704
commit 3670c1e4ad
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
testssl.sh
View File

@ -9416,8 +9416,8 @@ certificate_info() {
out "$indent"; pr_bold " Chain of trust"; out " "
jsonID="cert_chain_of_trust"
# Looks for CA's that have their trust removed by the first part of their Organization Name as they can only used verified names
if [[ "$issuer_O" =~ ^(TrustCor Systems|WoSign|StartCom) ]]; then
# Looks for CA's that have their trust removed by the first part of their Organization Name, add multiple with ^(TrustCor Systems|WoSign) etc.
if [[ "$issuer_O" =~ ^(TrustCor Systems) ]]; then
# Shortcut for this special case here. There is a difference between not being in a root store and being removed from a root store.
pr_italic "$issuer_O"; out " is " ; prln_svrty_critical "actively removed from one or more root stores (NOT ok)"
fileout "${jsonID}${json_postfix}" "CRITICAL" "Issuer removed from one or more root stores ($issuer_O)"