diff options
| author | Filippo Valsorda <filippo@golang.org> | 2020-10-30 16:40:27 +0100 |
|---|---|---|
| committer | Gopher Robot <gobot@golang.org> | 2022-11-14 19:18:39 +0000 |
| commit | ed615aaf5bd6bb9ab0c9d88f4e41b4d2ff07a10e (patch) | |
| tree | 7c90ebf8346d2fa1217ae280f3118612f6aed054 /src/crypto | |
| parent | 1a6a37f997d3e3b7d594874678cfb917b6665c6c (diff) | |
| download | go-ed615aaf5bd6bb9ab0c9d88f4e41b4d2ff07a10e.tar.xz | |
crypto/x509: expand package docs and clarify package target
Fixes #26624
Change-Id: Ifab3fc2209d71b9a7de383eaa5786b7446de25fa
Reviewed-on: https://go-review.googlesource.com/c/go/+/266541
Reviewed-by: Roland Shoemaker <roland@golang.org>
Run-TryBot: Roland Shoemaker <roland@golang.org>
Reviewed-by: Jonathan Amsterdam <jba@google.com>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
Auto-Submit: Roland Shoemaker <roland@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Diffstat (limited to 'src/crypto')
| -rw-r--r-- | src/crypto/x509/x509.go | 17 |
1 files changed, 16 insertions, 1 deletions
diff --git a/src/crypto/x509/x509.go b/src/crypto/x509/x509.go index 9ebc25bf00..9fbb97c5d6 100644 --- a/src/crypto/x509/x509.go +++ b/src/crypto/x509/x509.go @@ -2,7 +2,22 @@ // Use of this source code is governed by a BSD-style // license that can be found in the LICENSE file. -// Package x509 parses X.509-encoded keys and certificates. +// Package x509 implements a subset of the X.509 standard. +// +// It allows parsing and generating certificates, certificate signing +// requests, certificate revocation lists, and encoded public and private keys. +// It provides a certificate verifier, complete with a chain builder. +// +// The package targets the X.509 technical profile defined by the IETF (RFC +// 2459/3280/5280), and as further restricted by the CA/Browser Forum Baseline +// Requirements. There is minimal support for features outside of these +// profiles, as the primary goal of the package is to provide compatibility +// with the publicly trusted TLS certificate ecosystem and its policies and +// constraints. +// +// On macOS and Windows, certificate verification is handled by system APIs, but +// the package aims to apply consistent validation rules across operating +// systems. package x509 import ( |