diff options
| author | Roland Shoemaker <roland@golang.org> | 2022-03-21 11:58:08 -0700 |
|---|---|---|
| committer | Gopher Robot <gobot@golang.org> | 2022-04-04 16:49:52 +0000 |
| commit | 35998c010947d3a5a26409fffcb4ed16c3595850 (patch) | |
| tree | e8b95ea4e389c6433e27cef4b29fee34a14505af /src/make.bash | |
| parent | efbe17d6f1f016616453d43208200ebf4a45d87c (diff) | |
| download | go-35998c010947d3a5a26409fffcb4ed16c3595850.tar.xz | |
crypto/x509: only disable SHA-1 verification for certificates
Disable SHA-1 signature verification in Certificate.CheckSignatureFrom,
but not in Certificate.CheckSignature. This allows verification of OCSP
responses and CRLs, which still use SHA-1 signatures, but not on
certificates.
Updates #41682
Change-Id: Ia705eb5052e6fc2724fed59248b1c4ef8af6c3fe
Reviewed-on: https://go-review.googlesource.com/c/go/+/394294
Trust: Roland Shoemaker <roland@golang.org>
Run-TryBot: Roland Shoemaker <roland@golang.org>
Auto-Submit: Roland Shoemaker <roland@golang.org>
Reviewed-by: Jordan Liggitt <liggitt@google.com>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Diffstat (limited to 'src/make.bash')
0 files changed, 0 insertions, 0 deletions