Skip to content

Commit 3670c1e

Browse files
committed
Removed non-relevant CA's that no longer have active certificates.
1 parent 9fc8c33 commit 3670c1e

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

testssl.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9416,8 +9416,8 @@ certificate_info() {
94169416

94179417
out "$indent"; pr_bold " Chain of trust"; out " "
94189418
jsonID="cert_chain_of_trust"
9419-
# Looks for CA's that have their trust removed by the first part of their Organization Name as they can only used verified names
9420-
if [[ "$issuer_O" =~ ^(TrustCor Systems|WoSign|StartCom) ]]; then
9419+
# Looks for CA's that have their trust removed by the first part of their Organization Name, add multiple with ^(TrustCor Systems|WoSign) etc.
9420+
if [[ "$issuer_O" =~ ^(TrustCor Systems) ]]; then
94219421
# Shortcut for this special case here. There is a difference between not being in a root store and being removed from a root store.
94229422
pr_italic "$issuer_O"; out " is " ; prln_svrty_critical "actively removed from one or more root stores (NOT ok)"
94239423
fileout "${jsonID}${json_postfix}" "CRITICAL" "Issuer removed from one or more root stores ($issuer_O)"

0 commit comments

Comments
 (0)