1
0
mirror of https://github.com/golang/go synced 2024-11-21 23:14:40 -07:00
The Go programming language
Go to file
Mikkel Krautz a324a5ac20 crypto/x509: new home for root fetchers; build chains using Windows API
This moves the various CA root fetchers from crypto/tls into crypto/x509.

The move was brought about by issue 2997. Windows doesn't ship with all
its root certificates, but will instead download them as-needed when using
CryptoAPI for certificate verification.

This CL changes crypto/x509 to verify a certificate using the system root
CAs when VerifyOptions.RootCAs == nil. On Windows, this verification is
now implemented using Windows's CryptoAPI. All other root fetchers are
unchanged, and still use Go's own verification code.

The CL also fixes the hostname matching logic in crypto/tls/tls.go, in
order to be able to test whether hostname mismatches are honored by the
Windows verification code.

The move to crypto/x509 also allows other packages to use the OS-provided
root certificates, instead of hiding them inside the crypto/tls package.

Fixes #2997.

R=agl, golang-dev, alex.brainman, rsc, mikkel
CC=golang-dev
https://golang.org/cl/5700087
2012-03-07 13:12:35 -05:00
doc doc: update effective_go.tmpl 2012-03-07 11:57:54 -05:00
include build: remove unnecessary pragmas 2012-02-06 12:45:23 -05:00
lib godoc: switch on +1 buttons 2012-03-06 15:16:45 +11:00
misc undo CL 5754063 / e23b66fcfc94 2012-03-07 10:15:20 -05:00
src crypto/x509: new home for root fetchers; build chains using Windows API 2012-03-07 13:12:35 -05:00
test test: add inherited interface test to ddd.go 2012-03-07 08:24:10 -08:00
.hgignore hgignore: ignore run.out generated by misc/cgo/stdio/test.bash 2012-03-07 01:21:38 -05:00
.hgtags tag weekly.2012-03-04 2012-03-05 16:09:13 +11:00
AUTHORS C+A: adding c.emil.hessman@gmail.com 2012-03-05 15:10:58 -08:00
CONTRIBUTORS C+A: adding c.emil.hessman@gmail.com 2012-03-05 15:10:58 -08:00
favicon.ico add a favicon plus a couple of hi-res versions of gordon 2009-10-26 10:13:07 -07:00
LICENSE LICENSE: separate, change PATENTS text 2010-12-06 16:31:59 -05:00
PATENTS LICENSE: separate, change PATENTS text 2010-12-06 16:31:59 -05:00
README build: update, streamline documentation for new $GOBIN 2010-08-24 20:00:50 -04:00
robots.txt godoc: serve robots.txt raw 2011-02-19 05:46:20 +11:00

This is the source code repository for the Go programming language.  

For documentation about how to install and use Go,
visit http://golang.org/ or load doc/install.html in your web browser.

After installing Go, you can view a nicely formatted
doc/install.html by running godoc --http=:6060
and then visiting http://localhost:6060/doc/install.html.

Unless otherwise noted, the Go source files are distributed
under the BSD-style license found in the LICENSE file.

--

Binary Distribution Notes

If you have just untarred a binary Go distribution, you need to set
the environment variable $GOROOT to the full path of the go
directory (the one containing this README).  You can omit the
variable if you unpack it into /usr/local/go, or if you rebuild
from sources by running all.bash (see doc/install.html).
You should also add the Go binary directory $GOROOT/bin
to your shell's path.

For example, if you extracted the tar file into $HOME/go, you might
put the following in your .profile:

    export GOROOT=$HOME/go
    export PATH=$PATH:$GOROOT/bin

See doc/install.html for more details.