Future of Certlint / CABLint (was Re: ZLint 2.1.0-RC1 and announcement list)

2020-05-19 Thread Rob Stradling via dev-security-policy

In other linter news...

It has become clear that the original certlint/cablint repository 
(https://github.com/awslabs/certlint) is no longer being maintained.  At 
Sectigo we still use cablint as one of our preissuance linters, and 
we've been running into more and more problems with cablint's stale PSL 
data and one or two out-of-date lints.  We think it's useful to have 
multiple, independent certificate linting implementations, and so we 
believe that certlint/cablint still has value.  Consequently, Sectigo 
Management has asked me to maintain a fork of the certlint/cablint 
repository.  Here it is:


https://github.com/certlint/certlint

Collaborators would be very welcome!

BTW, crt.sh is now using this new certlint fork.

On 13/05/2020 17:23, Zakir Durumeric via dev-security-policy wrote:

Hi all,
Earlier this year, we began publishing semantically versioned ZLint releases 
based on several requests from CAs. Yesterday, we tagged 2.1.0-RC1 
(https://github.com/zmap/zlint/releases/tag/v2.1.0-rc1), which includes the 
first batch of Mozilla Root Store Policy lints.

We have created a new minimal-traffic announcement list, which is where we will 
be announcing releases and other major project updates in the future: 
https://groups.google.com/forum/#!forum/zlint-announcements.

Thanks,

Zakir


--
Rob Stradling
Senior Research & Development Scientist
Sectigo Limited

___
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy


ZLint 2.1.0-RC1 and announcement list

2020-05-14 Thread Zakir Durumeric via dev-security-policy
Hi all,
Earlier this year, we began publishing semantically versioned ZLint releases 
based on several requests from CAs. Yesterday, we tagged 2.1.0-RC1 
(https://github.com/zmap/zlint/releases/tag/v2.1.0-rc1), which includes the 
first batch of Mozilla Root Store Policy lints.

We have created a new minimal-traffic announcement list, which is where we will 
be announcing releases and other major project updates in the future: 
https://groups.google.com/forum/#!forum/zlint-announcements.

Thanks,

Zakir
___
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy