aboutsummaryrefslogtreecommitdiff
path: root/src/crypto/x509
AgeCommit message (Expand)Author
2026-02-03all: prealloc slice with possible minimum capabilitiesShulhan
2026-01-30cmd/go,crypto/mlkem,crypto/x509,encoding/ascii85: clean up tautological/impos...Neal Patel
2025-12-10crypto: clean up subprocess-spawning testsFilippo Valsorda
2025-12-02crypto/x509: prevent HostnameError.Error() from consuming excessive resourceNicholas S. Husin
2025-11-26crypto/x509: add ExtKeyUsage.OID methodRoland Shoemaker
2025-11-25crypto/ecdsa: clean up ECDSA parsing and serialization pathsFilippo Valsorda
2025-11-25crypto/x509: sub-quadratic name constraint checkingRoland Shoemaker
2025-11-25crypto/x509: cleanup name constraint testsRoland Shoemaker
2025-11-24crypto/x509: add ExtKeyUsage.String and KeyUsage.String methodsFilippo Valsorda
2025-11-12crypto/x509: move BetterTLS suite from crypto/tlsRoland Shoemaker
2025-10-24crypto/x509: move constraint checking after chain buildingRoland Shoemaker
2025-10-24crypto/x509: simplify candidate chain filteringRoland Shoemaker
2025-10-17all: remove unnecessary loop variable copies in testsTobias Klauser
2025-10-17all: correct name for commentsJes Cok
2025-10-11crypto/x509: rework fix for CVE-2025-58187Roland Shoemaker
2025-10-07crypto/x509: improve domain name verificationNeal Patel
2025-10-07crypto/x509: mitigate DoS vector when intermediate certificate contains DSA p...Neal Patel
2025-09-16crypto/x509/internal/macos: standardize package nameOleksandr Redko
2025-09-04crypto/x509: don't force system roots load in SetFallbackRootsMateusz Poliwczak
2025-05-21crypto/x509: use truncated SHA-256 for SubjectKeyIdFilippo Valsorda
2025-05-21crypto/x509: disallow negative path lengthMateusz Poliwczak
2025-05-13crypto/x509: decouple key usage and policy validationRoland Shoemaker
2025-05-08crypto,crypto/x509: implement MessageSignerRoland Shoemaker
2025-03-13crypto/x509: change how we retrieve chains on darwinRoland Shoemaker
2025-03-13crypto/x509,ecoding/asn1: better handling of weird encodingsRoland Shoemaker
2025-02-28crypto/x509: avoid crypto/rand.Int to generate serial numberFilippo Valsorda
2025-02-18all: use a more straightforward return valuecuishuang
2025-02-03crypto/x509/internal/macos: remove unused types and functionsqmuntal
2025-01-16crypto/x509: avoid panic when parsing partial PKCS#1 private keysFilippo Valsorda
2025-01-16crypto/x509: properly check for IPv6 hosts in URIsRoland Shoemaker
2024-12-02crypto/x509: add missing `be` to comment about serial number positivityWesley Beary
2024-11-30crypto/x509: keep RSA CRT values in ParsePKCS1PrivateKeyFilippo Valsorda
2024-11-30crypto/rsa: move precomputation to crypto/internal/fips140/rsaFilippo Valsorda
2024-11-22crypto/x509: run a subset of the NIST PKI test suiteRoland Shoemaker
2024-11-22crypto/x509: generate serial number for nil template SerialNumberSean Liao
2024-11-22crypto/x509: switch default policy field to PoliciesRoland Shoemaker
2024-11-22crypto/rsa: refuse to generate and/or use keys smaller than 1024 bitsFilippo Valsorda
2024-11-22crypto/x509: implement policy validationRoland Shoemaker
2024-11-21crypto/tls: FIPS 140-3 modeDaniel McCarney
2024-11-20crypto/x509: remove x509sha1 GODEBUGRoland Shoemaker
2024-08-21crypto/x509,math/rand/v2: implement the encoding.(Binary|Text)Appenderapocelipes
2024-08-15crypto,hash: add t.Helper calls to test helpersapocelipes
2024-07-24crypto/x509,embed: use slices to clean up testsapocelipes
2024-06-18Revert "crypto/x509: reject serial numbers longer than 20 octets"Roland Shoemaker
2024-06-04crypto/x509: don't panic when asn1.ObjectIdentifier is shorter than x509.OIDMateusz Poliwczak
2024-05-29all: document legacy //go:linkname for final round of modulesRuss Cox
2024-05-23all: change from sort functions to slices functions where feasibleIan Lance Taylor
2024-05-22crypto/x509: don't match bare wildcardRoland Shoemaker
2024-05-22crypto/x509: properly pouplate the RevocationList.AuthorityKeyId fieldMateusz Poliwczak
2024-05-22crypto/x509: reject serial numbers longer than 20 octetsRoland Shoemaker