1
0
mirror of https://github.com/golang/go synced 2024-11-14 08:50:22 -07:00
go/src/crypto/x509
Lee Hinman 6cd698d71d crypto/x509: add Admin & User Keychains to FetchPEMRoots on Darwin
in root_cgo_darwin.go only certificates from the System Domain
were being used in FetchPEMRoots.  This patch adds support for
getting certificates from all three domains (System, Admin,
User).  Also it will only read trusted certificates from those
Keychains.  Because it is possible to trust a non Root certificate,
this patch also adds a checks to see if the Subject and Issuer
name are the same.

Fixes #14514

Change-Id: Ia03936d7a61d1e24e99f31c92f9927ae48b2b494
Reviewed-on: https://go-review.googlesource.com/20351
Reviewed-by: Russ Cox <rsc@golang.org>
2016-05-18 14:26:59 +00:00
..
pkix crypto/x509/pkix: make 'v1' the default CRL version. 2016-03-10 23:48:16 +00:00
cert_pool.go crypto/x509: add SystemCertPool, refactor system cert pool loading 2016-03-31 07:52:10 +00:00
example_test.go crypto/x509: better documentation for ParsePKIXPublicKey 2016-02-26 06:36:10 +00:00
pem_decrypt_test.go crypto/x509: don't panic when decrypting invalid PEM data. 2015-06-26 16:16:51 +00:00
pem_decrypt.go all: single space after period. 2016-03-02 00:13:47 +00:00
pkcs1.go all: remove public named return values when useless 2016-02-29 03:31:19 +00:00
pkcs8_test.go
pkcs8.go all: standardize RFC mention format 2016-04-12 21:07:52 +00:00
root_bsd.go crypto/x509: split certFiles definition by GOOS 2015-01-05 05:41:27 +00:00
root_cgo_darwin.go crypto/x509: add Admin & User Keychains to FetchPEMRoots on Darwin 2016-05-18 14:26:59 +00:00
root_darwin_arm_gen.go crypto/x509: fix build break on darwin/{arm,arm64} 2016-04-01 01:10:59 +00:00
root_darwin_armx.go crypto/x509: fix build break on darwin/{arm,arm64} 2016-04-01 01:10:59 +00:00
root_darwin_test.go all: fix typos and spelling 2016-02-24 18:42:29 +00:00
root_darwin.go crypto/x509: build the builtin root certs also for darwin/arm64 2015-04-16 16:50:30 +00:00
root_linux.go crypto/x509: split certFiles definition by GOOS 2015-01-05 05:41:27 +00:00
root_nacl.go crypto/x509: fix nacl build 2015-01-05 06:31:49 +00:00
root_nocgo_darwin.go crypto/x509: add SystemCertPool, refactor system cert pool loading 2016-03-31 07:52:10 +00:00
root_plan9.go crypto/x509: add SystemCertPool, refactor system cert pool loading 2016-03-31 07:52:10 +00:00
root_solaris.go crypto/x509: add /etc/ssl/cacert.pem to OmniOS cert search list 2015-07-15 04:31:06 +00:00
root_unix.go crypto/x509: add SystemCertPool, refactor system cert pool loading 2016-03-31 07:52:10 +00:00
root_windows.go crypto/x509: add SystemCertPool, refactor system cert pool loading 2016-03-31 07:52:10 +00:00
root.go crypto/x509: add SystemCertPool, refactor system cert pool loading 2016-03-31 07:52:10 +00:00
sec1_test.go [dev.ssa] Merge remote-tracking branch 'origin/master' into mergebranch 2016-01-07 10:01:08 -08:00
sec1.go all: standardize RFC mention format 2016-04-12 21:07:52 +00:00
sha2_windows_test.go crypto/x509: use syscall.GetVersion instead of internal/syscall/windows.GetVersion 2015-03-31 08:11:24 +00:00
verify_test.go all: use bytes.Equal, bytes.Contains and strings.Contains 2016-04-01 02:05:01 +00:00
verify.go crypto/x509: add SystemCertPool, refactor system cert pool loading 2016-03-31 07:52:10 +00:00
x509_test_import.go
x509_test.go crypto/x509: gofmt 2016-04-17 15:19:44 +00:00
x509.go crypto/x509: fix typo in docs for CreateCertificateRequest 2016-05-18 03:06:56 +00:00