ZLint v2.1.0 Final Release

[Daniel McCarney]

Following our release candidate announcement the ZLint team is happy to announce the finalized v2.1.0 release. Please refer to the Github release page for the full detailed changelog.

New Lints

• New CABF Baseline Requirements Lint
  • e_ext_nc_intersects_reserved_ip
• New Mozilla PKI Policy Lints
  • e_mp_rsassa-pss_in_spki
  • e_mp_rsassa-pss_parameters_encoding_in_signature_algorithm_correct
  • e_mp_ecdsa_pub_key_encoding_correct
  • e_mp_ecdsa_signature_encoding_correct
• New Apple PKI Policy Lints
  • e_tls_server_cert_valid_time_longer_than_398_days

Bug Fixes

• The 2001:5::/32 network was removed from reserved networks list since it is no longer IANA reserved.

Misc

• Updated TLD data (Current to 2020-04-02).
• README updates.
• CI test for ensuring OpenSSL text prepend of test cert data.