mirror of
https://github.com/golang/go
synced 2024-11-23 17:50:06 -07:00
crypto/x509: include more hints for verification failure
Include hint from isValid, as well as CheckSignatureFrom. Change-Id: I408f73fc5f12572f1937da50be7fa3e1109164b0 Reviewed-on: https://go-review.googlesource.com/c/go/+/454477 TryBot-Result: Gopher Robot <gobot@golang.org> Auto-Submit: Roland Shoemaker <roland@golang.org> Run-TryBot: Roland Shoemaker <roland@golang.org> Reviewed-by: Damien Neil <dneil@google.com>
This commit is contained in:
parent
2ca32a5b99
commit
36b87f273c
@ -925,6 +925,10 @@ func (c *Certificate) buildChains(currentChain []*Certificate, sigChecks *int, o
|
|||||||
|
|
||||||
err = candidate.isValid(certType, currentChain, opts)
|
err = candidate.isValid(certType, currentChain, opts)
|
||||||
if err != nil {
|
if err != nil {
|
||||||
|
if hintErr == nil {
|
||||||
|
hintErr = err
|
||||||
|
hintCert = candidate
|
||||||
|
}
|
||||||
return
|
return
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user