smimesign --list-keys must display only valid certificates for digitalSignature
Open
- Dominant language
- Go
- Stars
- 657
- Forks
- 154
- PR merge metrics
- No merged PRs in 30d
Description
When invoke `smimesign --list-keys`, it display all certificates including :
- expired certificates
- revoked certificates
- certificates without digitalSignature key usage (cf. https://www.rfc-editor.org/rfc/rfc5280#section-4.2.1.3)
Expired/revoked certificates, and certificates without digitalSignature key usage must not be displayed.
Contributor guide
Assessment
This issue has not been assessed yet.