Christopher Henderson

Permit underscores in DNSNames if-and-only-if those certificates are valid for less than 30 days and during BR 1.6.2's permissibility period

1

This lint encodes a brief period from December 10th 2018 to April 1st 2019 wherein CABF BR permitted underscores within DNS names if-and-only if those certificates were valid for fewer...

Permit underscores in DNSNames if-and-only-if replacing all underscores results in valid LDH labels during BR 1.6.2's permissibility period

1

This lint encodes a brief period from December 10th 2018 to April 1st 2019 wherein CABF BR permitted underscores within DNS names if-and-only replacing each underscore with a hyphen would...

This lint encodes that RFC5280 was never permissive of underscore characters within DNS names.

Adding support for linting profiles

1

# What is a Profile A profile derives from the conversation in #583 wherein we would like to have curated lists of lints that, collectively, refer to a particular requirement...

In the interest of moving #646 over the finish line (@CBonnell because I don't think I can add you as a reviewer), I believe that it would be prudent to...

[Ballot SC12](https://cabforum.org/2018/11/12/ballot-sc-12-sunset-of-underscores-in-dnsnames/) sunsetted the permissibility of underscores in DNS names on April 1st, 2019 via CABF 1.6.2. The language is as follows: > Prior to April 1, 2019, certificates containing...

Support for linting profiles

2

Conversations in #583 led us down the path of the concept of a `profile` in ZLint. A profile is a named grouping of lints that, taken together, refer to a...

This relates to #136 as well as #413 (begin linting out DNS and IP name constraints). Rather than have a monolithic "invalid DNS" lint I reckoned that it would be...

DNS Name Constraints may not have a "." prefix

3

This PR addresses issue #566