Add a "suspicious intermediate" mark for future debugging.

InCommon · Feb 6, 2013 · 0e6239a · 0e6239a
1 parent 7cf70d6
commit 0e6239a
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/build/check_embedded.pl b/build/check_embedded.pl
@@ -48,6 +48,7 @@
 $issuerMark{'GlobalSign Primary Secure Server CA'} = 'i';
 $issuerMark{'GlobalSign ServerSign CA'} = 'i';
 $issuerMark{'Thawte Premium Server CA'} = '<'; # root directly signs; 1024 bit key
+#$issuerMark{'VeriSign International Server CA - Class 3'} = '?';
 
 # NOT from master.xml
 $issuerMark{'Cybertrust Educational CA'} = 'x'; # ex trust root
@@ -503,6 +504,9 @@ sub comment {
 			if ($mark eq '<') {
 				warning("issuer '$issuerCN' associated with a 1024-bit root, expiry $notAfter");
 			}
+			if ($mark eq '?') {
+				warning("issuer '$issuerCN' suspect; verify");
+			}
 		}
 
 		#