Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

sync x509 update #223

Closed
6 of 8 tasks
emmansun opened this issue May 23, 2024 · 2 comments
Closed
6 of 8 tasks

sync x509 update #223

emmansun opened this issue May 23, 2024 · 2 comments
Assignees
@emmansun
Labels
sync sdk

Comments

@emmansun
Copy link
Owner

emmansun commented May 23, 2024 •
edited
Loading

  • x509: don't match bare wildcard
  • x509: reject serial numbers longer than 20 octets
  • x509: reject negative serial numbers
  • x509: cleanup signature generation
  • x509: reject critical AKI
  • x509: reject critical SKI extensions
  • x509: reject critical AIA extensions
  • x509: properly reject invalid DNS names when checking constraints
@emmansun emmansun self-assigned this May 23, 2024
emmansun added a commit that referenced this issue May 23, 2024
@emmansun
x509: sync with sdk #223
7c46d7b
@emmansun
Copy link
Owner Author

emmansun commented May 23, 2024 •
edited
Loading

x509: reject serial numbers longer than 20 octets and x509: reject negative serial numbers will only impact parse certificate, and depends on internal/godebug package, will NOT sync it now.

emmansun added a commit that referenced this issue May 23, 2024
@emmansun
x509: rollback some change first #223
6762238
emmansun added a commit that referenced this issue May 23, 2024
@emmansun
x509: fix test cases, disable sm2withsm3 mixed with others #223
74754d5
@emmansun
Copy link
Owner Author

v0.27.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@emmansun emmansun

Labels
sync sdk
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@emmansun