From e06fa2d8ea3a3aecb373209abb1f23d46991bef3 Mon Sep 17 00:00:00 2001
From: bob reynders <bob.reynders@cleverbase.com>
Date: Tue, 29 Oct 2024 13:22:56 +0100
Subject: [PATCH] qcp-n-qscd: 411-1 policy presence validator

---
 pkilint/etsi/__init__.py     |  1 +
 pkilint/etsi/en_319_411_1.py | 15 +++++++++++++++
 2 files changed, 16 insertions(+)

diff --git a/pkilint/etsi/__init__.py b/pkilint/etsi/__init__.py
index 9bc6bce..9d1cff9 100644
--- a/pkilint/etsi/__init__.py
+++ b/pkilint/etsi/__init__.py
@@ -372,6 +372,7 @@ def create_validators(
         certificate_type in etsi_constants.QCP_N_CERTIFICATE_TYPES
         or certificate_type in etsi_constants.CABF_CERTIFICATE_TYPES
     ):
+        extension_validators.append(en_319_411_1.CertificatePoliciesPresenceValidator())
         extension_validators.append(
             en_319_411_1.CertificatePoliciesValidator(certificate_type)
         )
diff --git a/pkilint/etsi/en_319_411_1.py b/pkilint/etsi/en_319_411_1.py
index 6cb7016..481a557 100644
--- a/pkilint/etsi/en_319_411_1.py
+++ b/pkilint/etsi/en_319_411_1.py
@@ -3,6 +3,21 @@
 from pkilint import validation, oid
 from pkilint.etsi import etsi_constants
 from pkilint.etsi.asn1 import en_319_411_1
+from pkilint.pkix import extension
+
+
+class CertificatePoliciesPresenceValidator(extension.ExtensionPresenceValidator):
+    VALIDATION_CERTIFICATE_POLICIES_EXTENSION_ABSENT = validation.ValidationFinding(
+        validation.ValidationFindingSeverity.ERROR,
+        "etsi.en_319_411_1.OVR-5.3.01.certificate_policies_extension_missing",
+    )
+
+    def __init__(self):
+        super().__init__(
+            extension_oid=rfc5280.id_ce_certificatePolicies,
+            validation=self.VALIDATION_CERTIFICATE_POLICIES_EXTENSION_ABSENT,
+            pdu_class=rfc5280.Extensions,
+        )
 
 
 class CertificatePoliciesValidator(validation.Validator):