]> Cypherpunks repositories - gostls13.git/commit
crypto/x509: allow a leaf certificate to be specified directly as root.
authorAdam Langley <agl@golang.org>
Thu, 18 Aug 2016 23:44:08 +0000 (16:44 -0700)
committerAdam Langley <agl@golang.org>
Fri, 19 Aug 2016 16:56:23 +0000 (16:56 +0000)
commit8ad70a549364c216c386afcead4dccfdcd39748b
tree7126b28c255f19dac264b6efc461274afc835cc1
parentbcd54f6ca514ae0e347c780b45d743f2c4145bf3
crypto/x509: allow a leaf certificate to be specified directly as root.

In other systems, putting a leaf certificate in the root store works to
express that exactly that certificate is acceptable. This change makes
that work in Go too.

Fixes #16763.

Change-Id: I5c0a8dbc47aa631b23dd49061fb217ed8b0c719c
Reviewed-on: https://go-review.googlesource.com/27393
Run-TryBot: Adam Langley <agl@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
src/crypto/x509/cert_pool.go
src/crypto/x509/verify.go
src/crypto/x509/verify_test.go