From: Wesley Beary <geemus@gmail.com>
Date: Mon, 2 Dec 2024 15:47:31 +0000 (+0000)
Subject: crypto/x509: add missing `be` to comment about serial number positivity
X-Git-Tag: go1.24rc1~52
X-Git-Url: http://www.git.cypherpunks.su/?a=commitdiff_plain;h=e5489a34ca2c31608821d3ac4ec07892fb6a2272;p=gostls13.git

crypto/x509: add missing `be` to comment about serial number positivity

Change-Id: I4e0e5309eb3cb1c6820f1a034a5f52adffe35645
GitHub-Last-Rev: 74b2e89bbdba1b0ec64b22ec7ce0e8f1b071473b
GitHub-Pull-Request: golang/go#70639
Reviewed-on: https://go-review.googlesource.com/c/go/+/632815
Reviewed-by: Michael Knyszek <mknyszek@google.com>
Auto-Submit: Roland Shoemaker <roland@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
---

diff --git a/src/crypto/x509/x509.go b/src/crypto/x509/x509.go
index f7ee1b511c..2283f6cac3 100644
--- a/src/crypto/x509/x509.go
+++ b/src/crypto/x509/x509.go
@@ -1694,7 +1694,7 @@ func CreateCertificate(rand io.Reader, template, parent *Certificate, pub, priv
 		}
 	}
 
-	// RFC 5280 Section 4.1.2.2: serial number must positive
+	// RFC 5280 Section 4.1.2.2: serial number must be positive
 	//
 	// We _should_ also restrict serials to <= 20 octets, but it turns out a lot of people
 	// get this wrong, in part because the encoding can itself alter the length of the