aboutsummaryrefslogtreecommitdiff
path: root/src/crypto/x509/name_constraints_test.go
diff options
context:
space:
mode:
Diffstat (limited to 'src/crypto/x509/name_constraints_test.go')
-rw-r--r--src/crypto/x509/name_constraints_test.go11
1 files changed, 11 insertions, 0 deletions
diff --git a/src/crypto/x509/name_constraints_test.go b/src/crypto/x509/name_constraints_test.go
index b325c8edb9..3e205e5caf 100644
--- a/src/crypto/x509/name_constraints_test.go
+++ b/src/crypto/x509/name_constraints_test.go
@@ -1645,6 +1645,17 @@ var nameConstraintsTests = []nameConstraintsTest{
sans: []string{"email:a@ExAmple.com"},
},
},
+ {
+ name: "excluded constraint, empty DNS san",
+ roots: []constraintsSpec{
+ {
+ bad: []string{"dns:example.com"},
+ },
+ },
+ leaf: leafSpec{
+ sans: []string{"dns:"},
+ },
+ },
}
func makeConstraintsCACert(constraints constraintsSpec, name string, key *ecdsa.PrivateKey, parent *Certificate, parentKey *ecdsa.PrivateKey) (*Certificate, error) {