Update EV locality lint

Since EV ver 1.6.4 and ballot 191, localityName is optional if stateOrProvinceName is present. Closes amazon-archives#65
Santhanraj · May 29, 2018 · e691573 · e691573
1 parent 064051c
commit e691573
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/certlint/cablint.rb b/lib/certlint/cablint.rb
@@ -255,8 +255,8 @@ def self.lint(der)
         unless subjattrs.include? 'serialNumber'
           messages << 'E: EV certificates must include serialNumber in subject'
         end
-        unless subjattrs.include? 'L'
-          messages << 'E: EV certificates must include localityName in subject'
+        if !(subjattrs.include? 'L') && !(subjattrs.include? 'ST')
+            messages << 'E: EV certificates must include either localityName or stateOrProvinceName'
         end
         unless subjattrs.include? 'C'
           messages << 'E: EV certificates must include countryName in subject'