]> Cypherpunks repositories - gostls13.git/commit
crypto/tls: Check all certificates in the path.
authorJohn Shahid <jvshahid@gmail.com>
Wed, 29 May 2013 15:21:32 +0000 (11:21 -0400)
committerAdam Langley <agl@golang.org>
Wed, 29 May 2013 15:21:32 +0000 (11:21 -0400)
commitca986a2c81f85af0ae009e6b90098c703766c28a
treef752f1bfc6bd2e8af4e3f541c19d2af3b85a1382
parent9fae8658baeb251d6ac2bfd245a6de21a204e4a9
  crypto/tls: Check all certificates in the path.

Currently we only check the leaf node's issuer against the list of
distinguished names in the server's CertificateRequest message. This
will fail if the client certiciate has more than one certificate in
the path and the leaf node issuer isn't in the list of distinguished
names, but the issuer's issuer was in the distinguished names.

R=agl, agl
CC=gobot, golang-dev
https://golang.org/cl/9795043
src/pkg/crypto/tls/handshake_client.go
src/pkg/crypto/tls/handshake_client_test.go