]> Cypherpunks repositories - gostls13.git/commit
[release-branch.go1.11] crypto/x509: allow ":" in Common Name hostnames
authorFilippo Valsorda <filippo@golang.org>
Fri, 7 Sep 2018 16:58:14 +0000 (12:58 -0400)
committerFilippo Valsorda <filippo@golang.org>
Fri, 7 Sep 2018 22:43:32 +0000 (22:43 +0000)
commit71fce844b529e438eb35ca6f0c5173f7c10981b2
tree1fd556f119800e5aa73953ef7c235e0c96a85621
parentcd9f60131bb39a58af8fc0e0a7a5e7df9d3c55fd
[release-branch.go1.11] crypto/x509: allow ":" in Common Name hostnames

At least one popular service puts a hostname which contains a ":"
in the Common Name field. On the other hand, I don't know of any name
constrained certificates that only work if we ignore such CNs.

Updates #24151

Change-Id: I2d813e3e522ebd65ab5ea5cd83390467a869eea3
Reviewed-on: https://go-review.googlesource.com/134076
Run-TryBot: Filippo Valsorda <filippo@golang.org>
Reviewed-by: Adam Langley <agl@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
(cherry picked from commit 03c703697f321f66d28d6223457622c5879ba37f)
Reviewed-on: https://go-review.googlesource.com/134078
Reviewed-by: Andrew Bonventre <andybons@golang.org>
src/crypto/x509/verify.go
src/crypto/x509/verify_test.go