]> Cypherpunks repositories - gostls13.git/commit
crypto/x509: enforce path length constraint.
authorAdam Langley <agl@golang.org>
Mon, 5 Mar 2012 17:08:42 +0000 (12:08 -0500)
committerAdam Langley <agl@golang.org>
Mon, 5 Mar 2012 17:08:42 +0000 (12:08 -0500)
commited35d5e0fb6db614718d2f289d71bd793406a5aa
treebf4ee622276c6f71892ff7da9f3af593ef7793a2
parent52d6ca2f86ea6b4b291a5658fbc9e2325bc4d028
crypto/x509: enforce path length constraint.

An X.509 path length constrains the number of certificate that may
follow in the chain. This is a little simplistic for a first pass as it
doesn't check self-signed certificates (which don't count towards the
length), but it's conservatively simplistic.

R=golang-dev, r
CC=golang-dev
https://golang.org/cl/5727057
src/pkg/crypto/x509/verify.go
src/pkg/crypto/x509/x509.go