]> Cypherpunks repositories - gostls13.git/commit
[release-branch.go1.2] crypto/x509: name constraints should be a disjunction.
authorAndrew Gerrand <adg@golang.org>
Fri, 1 Nov 2013 00:09:56 +0000 (11:09 +1100)
committerAndrew Gerrand <adg@golang.org>
Fri, 1 Nov 2013 00:09:56 +0000 (11:09 +1100)
commitbf5d7c6713c065570383ab38be53586066a49d25
treeb3553e5ccccecef249eca38b5d6ab0cf31c3dfdb
parent6cbfe8df5c22ed2859980ba51309be434eb3084f
[release-branch.go1.2] crypto/x509: name constraints should be a disjunction.

««« CL 15570044 / b4c37131e846
crypto/x509: name constraints should be a disjunction.

The code was requiring that all constraints be met, but it should be
satisfied by meeting *any* of them.

R=golang-dev, bradfitz, r
CC=golang-dev
https://golang.org/cl/15570044
»»»

R=golang-dev
CC=golang-dev
https://golang.org/cl/20580043
src/pkg/crypto/x509/verify.go
src/pkg/crypto/x509/verify_test.go