1
0
mirror of https://github.com/golang/go synced 2024-11-17 00:04:40 -07:00

crypto/x509: clarify wildcard matching according to rfc6125

This commit is contained in:
Mateusz Poliwczak 2023-04-20 19:49:07 +02:00
parent bdccb85f50
commit b48c284c42

View File

@ -1081,7 +1081,7 @@ func toLowerCaseASCII(in string) string {
// IP addresses can be optionally enclosed in square brackets and are checked
// against the IPAddresses field. Other names are checked case insensitively
// against the DNSNames field. If the names are valid hostnames, the certificate
// fields can have a wildcard as the left-most label.
// fields can have a wildcard as the complete left-most label (e.g. *.example.com).
//
// Note that the legacy Common Name field is ignored.
func (c *Certificate) VerifyHostname(h string) error {