mirror of
https://github.com/golang/go
synced 2024-11-23 08:50:03 -07:00
doc: minor go1.11 changes
CL 124135 follow-ups. Change-Id: Ib7e2066bd2d18851561e03386709a1b42b50fcef Reviewed-on: https://go-review.googlesource.com/124136 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Reviewed-by: Andrew Bonventre <andybons@golang.org>
This commit is contained in:
parent
b9a764ffdf
commit
a80a7f0e77
@ -218,9 +218,9 @@ Do not send CLs removing the interior tags from such phrases.
|
|||||||
<dd>
|
<dd>
|
||||||
<p><!-- CL 64451 -->
|
<p><!-- CL 64451 -->
|
||||||
Certain crypto operations, including
|
Certain crypto operations, including
|
||||||
<a href="/pkg/crypto/ecdsa/#Sign"><code>crypto/ecdsa.Sign</code></a>,
|
<a href="/pkg/crypto/ecdsa/#Sign"><code>ecdsa.Sign</code></a>,
|
||||||
<a href="/pkg/crypto/rsa/#EncryptPKCS1v15"><code>crypto/rsa.EncryptPKCS1v15</code></a> and
|
<a href="/pkg/crypto/rsa/#EncryptPKCS1v15"><code>rsa.EncryptPKCS1v15</code></a> and
|
||||||
<a href="/pkg/crypto/rsa/#GenerateKey"><code>crypto/rsa.GenerateKey</code></a>,
|
<a href="/pkg/crypto/rsa/#GenerateKey"><code>rsa.GenerateKey</code></a>,
|
||||||
now randomly read an extra byte of randomness to ensure tests don't rely on internal behavior.
|
now randomly read an extra byte of randomness to ensure tests don't rely on internal behavior.
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
@ -229,7 +229,7 @@ Do not send CLs removing the interior tags from such phrases.
|
|||||||
<dl id="crypto/cipher"><dt><a href="/pkg/crypto/cipher/">crypto/cipher</a></dt>
|
<dl id="crypto/cipher"><dt><a href="/pkg/crypto/cipher/">crypto/cipher</a></dt>
|
||||||
<dd>
|
<dd>
|
||||||
<p><!-- CL 48510, CL 116435 -->
|
<p><!-- CL 48510, CL 116435 -->
|
||||||
The new <a href="/pkg/crypto/cipher/#NewGCMWithTagSize"><code>NewGCMWithTagSize</code></a>
|
The new function <a href="/pkg/crypto/cipher/#NewGCMWithTagSize"><code>NewGCMWithTagSize</code></a>
|
||||||
implements Galois Counter Mode with non-standard tag lengths for compatibility with existing cryptosystems.
|
implements Galois Counter Mode with non-standard tag lengths for compatibility with existing cryptosystems.
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
@ -258,10 +258,10 @@ Do not send CLs removing the interior tags from such phrases.
|
|||||||
<dl id="crypto/x509"><dt><a href="/pkg/crypto/x509/">crypto/x509</a></dt>
|
<dl id="crypto/x509"><dt><a href="/pkg/crypto/x509/">crypto/x509</a></dt>
|
||||||
<dd>
|
<dd>
|
||||||
<p><!-- CL 123355, CL 123695 -->
|
<p><!-- CL 123355, CL 123695 -->
|
||||||
The deprecated, legacy behavior of treating the <code>Common</code> <code>Name</code> field as
|
The deprecated, legacy behavior of treating the <code>CommonName</code> field as
|
||||||
a hostname when no Subject Alternative Names are present is now disabled when the CN is not a
|
a hostname when no Subject Alternative Names are present is now disabled when the CN is not a
|
||||||
valid hostname.
|
valid hostname.
|
||||||
The <code>Common</code> <code>Name</code> can be completely ignored by adding the experimental value
|
The <code>CommonName</code> can be completely ignored by adding the experimental value
|
||||||
<code>x509ignoreCN=1</code> to the <code>GODEBUG</code> environment variable.
|
<code>x509ignoreCN=1</code> to the <code>GODEBUG</code> environment variable.
|
||||||
When the CN is ignored, certificates without SANs validate under chains with name constraints
|
When the CN is ignored, certificates without SANs validate under chains with name constraints
|
||||||
instead of returning <code>NameConstraintsWithoutSANs</code>.
|
instead of returning <code>NameConstraintsWithoutSANs</code>.
|
||||||
@ -269,7 +269,8 @@ Do not send CLs removing the interior tags from such phrases.
|
|||||||
|
|
||||||
<p><!-- CL 113475 -->
|
<p><!-- CL 113475 -->
|
||||||
Extended key usage restrictions are again checked only if they appear in the <code>KeyUsages</code>
|
Extended key usage restrictions are again checked only if they appear in the <code>KeyUsages</code>
|
||||||
field of <a href="/pkg/crypto/x509/#VerifyOptions"><code>VerifyOptions</code></a>, instead of all at once.
|
field of <a href="/pkg/crypto/x509/#VerifyOptions"><code>VerifyOptions</code></a>, instead of always being checked.
|
||||||
|
This matches the behavior of Go 1.9 and earlier.
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
<p><!-- CL 102699 -->
|
<p><!-- CL 102699 -->
|
||||||
|
Loading…
Reference in New Issue
Block a user