1
0
mirror of https://github.com/golang/go synced 2024-11-14 15:00:27 -07:00
go/src/crypto
Adam Langley e56be94375 crypto/x509: add test for v1 intermediates.
X.509v1 certificates are ancient and should be dead. (They are even
prohibited by the Baseline requirements, section 7.1.1.)

However, there are a number of v1 roots from the 1990's that are still
in operation. Thus crypto/x509.Certificate.CheckSignatureFrom allows
X.509v1 certificates to sign other certificates.

The chain building code, however, only allows v1 certificates to sign
others if they're a root. This change adds a test to check that.

Change-Id: Ib8d81e522f30d41932b89bdf3b19ef3782d8ec12
Reviewed-on: https://go-review.googlesource.com/34383
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
2017-02-01 21:59:45 +00:00
..
aes crypto/aes: correct 'noescape' typo in s390x 2016-12-14 16:10:22 +00:00
cipher all: make spelling consistent 2016-12-08 23:22:37 +00:00
des
dsa crypto/dsa: gofmt 2017-01-11 17:10:59 +00:00
ecdsa
elliptic crypto/*: document use or non-use of constant-time algorithms 2016-12-07 16:34:50 +00:00
hmac
internal/cipherhw crypto/{cipher,tls,internal/cryptohw}: prioritise AES-GCM when hardware support is present. 2016-11-07 20:01:18 +00:00
md5
rand math/big: add Baillie-PSW test to (*Int).ProbablyPrime 2016-11-22 02:05:47 +00:00
rc4
rsa crypto/*: document use or non-use of constant-time algorithms 2016-12-07 16:34:50 +00:00
sha1 crypto: detect BMI usability on AMD64 for sha1 and sha256 2017-01-05 15:37:37 +00:00
sha256 crypto: detect BMI usability on AMD64 for sha1 and sha256 2017-01-05 15:37:37 +00:00
sha512 crypto/sha512: improve performance for sha512.block on ppc64le 2016-10-31 19:13:52 +00:00
subtle
tls crypto/tls: document ConnectionState.NegotiatedProtocol more clearly 2017-02-01 21:48:27 +00:00
x509 crypto/x509: add test for v1 intermediates. 2017-02-01 21:59:45 +00:00
crypto.go