]> Cypherpunks repositories - gostls13.git/commit
crypto/x509: name constraints should be a disjunction.
authorAdam Langley <agl@golang.org>
Mon, 21 Oct 2013 23:01:24 +0000 (19:01 -0400)
committerAdam Langley <agl@golang.org>
Mon, 21 Oct 2013 23:01:24 +0000 (19:01 -0400)
commit7d9acff7511c85ee6d187bdb33b3237f0c04df55
treefdfb178e922704a1f0b795f0b544e07f2f984b68
parentefed6f99d262d15e0863950843cd6089d9034e03
crypto/x509: name constraints should be a disjunction.

The code was requiring that all constraints be met, but it should be
satisfied by meeting *any* of them.

R=golang-dev, bradfitz, r
CC=golang-dev
https://golang.org/cl/15570044
src/pkg/crypto/x509/verify.go
src/pkg/crypto/x509/verify_test.go