x509

package standard library

Go to main page

Versions in this module

go1

go1.24rc2

Jan 16, 2025 GO-2025-3373 +1 more

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

GO-2025-3421: ParsePKCS1PrivateKey panic with partial keys in crypto/x509

go1.24rc1

Dec 13, 2024 GO-2025-3373 +1 more

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

GO-2025-3421: ParsePKCS1PrivateKey panic with partial keys in crypto/x509

go1.23.5

Jan 16, 2025

go1.23.4

Dec 3, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.23.3

Nov 6, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.23.2

Oct 1, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.23.1

Sep 5, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.23.0

Aug 13, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type OID

+ func ParseOID(oid string) (OID, error)

+ func (o *OID) UnmarshalBinary(b []byte) error

+ func (o *OID) UnmarshalText(text []byte) error

+ func (o OID) MarshalBinary() ([]byte, error)

+ func (o OID) MarshalText() ([]byte, error)

go1.23rc2

Jul 16, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.23rc1

Jun 21, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.11

Jan 16, 2025

go1.22.10

Dec 3, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.9

Nov 6, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.8

Oct 1, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.7

Sep 5, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.6

Aug 6, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.5

Jul 2, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.4

Jun 4, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.3

May 7, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.2

Apr 3, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.1

Mar 5, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22.0

Feb 6, 2024 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type CertPool

+ func (s *CertPool) AddCertWithConstraint(cert *Certificate, constraint func([]*Certificate) error)

type Certificate

+ Policies []OID

+ type OID struct

+ func OIDFromInts(oid []uint64) (OID, error)

+ func (oid OID) Equal(other OID) bool

+ func (oid OID) EqualASN1OID(other asn1.ObjectIdentifier) bool

+ func (oid OID) String() string

go1.22rc2

Jan 24, 2024 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.22rc1

Dec 19, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.13

Aug 6, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.12

Jul 2, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.11

Jun 4, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.10

May 7, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.9

Apr 3, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.8

Mar 5, 2024 GO-2025-3373

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.7

Feb 6, 2024 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.6

Jan 9, 2024 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.5

Dec 5, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.4

Nov 7, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.3

Oct 10, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.2

Oct 5, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.1

Sep 6, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21.0

Aug 8, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type RevocationList

+ RevokedCertificateEntries []RevocationListEntry

+ type RevocationListEntry struct

+ Extensions []pkix.Extension

+ ExtraExtensions []pkix.Extension

+ Raw []byte

+ ReasonCode int

+ RevocationTime time.Time

+ SerialNumber *big.Int

go1.21rc4

Aug 2, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21rc3

Jul 14, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21rc2

Jun 21, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.21rc1

Jun 16, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.14

Feb 6, 2024 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.13

Jan 9, 2024 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.12

Dec 5, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.11

Nov 7, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.10

Oct 10, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.9

Oct 5, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.8

Sep 6, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.7

Aug 1, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.6

Jul 11, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.5

Jun 6, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.4

May 2, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.3

Apr 4, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.2

Mar 7, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20.1

Feb 14, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20

Feb 1, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

+ func SetFallbackRoots(roots *CertPool)

go1.20rc3

Jan 12, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20rc2

Jan 4, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.20rc1

Dec 7, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.13

Sep 6, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.12

Aug 1, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.11

Jul 11, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.10

Jun 6, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.9

May 2, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.8

Apr 4, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.7

Mar 7, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.6

Feb 14, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.5

Jan 10, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.4

Dec 6, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.3

Nov 1, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.2

Oct 4, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19.1

Sep 6, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19

Aug 2, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type CertPool

+ func (s *CertPool) Clone() *CertPool

+ func (s *CertPool) Equal(other *CertPool) bool

type RevocationList

+ AuthorityKeyId []byte

+ Extensions []pkix.Extension

+ Issuer pkix.Name

+ Raw []byte

+ RawIssuer []byte

+ RawTBSRevocationList []byte

+ Signature []byte

+ func ParseRevocationList(der []byte) (*RevocationList, error)

+ func (rl *RevocationList) CheckSignatureFrom(parent *Certificate) error

go1.19rc2

Jul 12, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19rc1

Jul 6, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.19beta1

Jun 9, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.10

Jan 10, 2023 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.9

Dec 6, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.8

Nov 1, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.7

Oct 4, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.6

Sep 6, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.5

Aug 1, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.4

Jul 12, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.3

Jun 1, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.2

May 10, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18.1

Apr 12, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18

Mar 15, 2022 GO-2022-0434 +2 more

GO-2022-0434: Panic during certificate parsing on Darwin in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18rc1

Feb 16, 2022 GO-2022-0434 +2 more

GO-2022-0434: Panic during certificate parsing on Darwin in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18beta2

Jan 31, 2022 GO-2022-0434 +2 more

GO-2022-0434: Panic during certificate parsing on Darwin in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.18beta1

Dec 14, 2021 GO-2022-0434 +2 more

GO-2022-0434: Panic during certificate parsing on Darwin in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.13

Aug 1, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.12

Jul 12, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.11

Jun 1, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.10

May 10, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.9

Apr 12, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.8

Mar 3, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.7

Feb 9, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.6

Jan 6, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.5

Dec 9, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.4

Dec 2, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.3

Nov 4, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.2

Oct 7, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17.1

Sep 9, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17

Aug 16, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17rc2

Aug 2, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17rc1

Jul 13, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.17beta1

Jun 10, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.15

Mar 3, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.14

Feb 9, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.13

Jan 6, 2022 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.12

Dec 9, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.11

Dec 2, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.10

Nov 4, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.9

Oct 7, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.8

Sep 9, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.7

Aug 4, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.6

Jul 12, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.5

Jun 3, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.4

May 6, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.3

Apr 1, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.2

Mar 11, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16.1

Mar 10, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16

Feb 16, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type SystemRootsError

+ func (se SystemRootsError) Unwrap() error

go1.16rc1

Jan 27, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.16beta1

Dec 17, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.15

Aug 4, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.14

Jul 12, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.13

Jun 3, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.12

May 6, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.11

Apr 1, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.10

Mar 11, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.9

Mar 10, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.8

Feb 4, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.7

Jan 19, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.6

Dec 3, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.5

Nov 12, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.4

Nov 5, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.3

Oct 14, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.2

Sep 9, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15.1

Sep 1, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15

Aug 11, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

+ func CreateRevocationList(rand io.Reader, template *RevocationList, issuer *Certificate, ...) ([]byte, error)

+ type RevocationList struct

+ ExtraExtensions []pkix.Extension

+ NextUpdate time.Time

+ Number *big.Int

+ RevokedCertificates []pkix.RevokedCertificate

+ SignatureAlgorithm SignatureAlgorithm

+ ThisUpdate time.Time

go1.15rc2

Aug 7, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15rc1

Jul 24, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.15beta1

Jun 10, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.15

Feb 4, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.14

Jan 19, 2021 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.13

Dec 3, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.12

Nov 12, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.11

Nov 5, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.10

Oct 14, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.9

Sep 9, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.8

Sep 1, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.7

Aug 6, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.6

Jul 16, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.5

Jul 14, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.4

Jun 1, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.3

May 14, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.2

Apr 8, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14.1

Mar 19, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14

Feb 25, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14rc1

Feb 5, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.14beta1

Dec 17, 2019 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.15

Aug 6, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.14

Jul 16, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.13

Jul 14, 2020 GO-2024-2598 +1 more

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.12

Jun 1, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.11

May 14, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.10

Apr 8, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.9

Mar 19, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.8

Feb 12, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.7

Jan 27, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.6

Jan 9, 2020 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.5

Dec 4, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.4

Oct 31, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.3

Oct 17, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.2

Oct 17, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13.1

Sep 25, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13

Sep 3, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type PublicKeyAlgorithm

+ const Ed25519

type SignatureAlgorithm

+ const PureEd25519

go1.13rc2

Aug 29, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13rc1

Aug 21, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.13beta1

Jun 26, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.17

Feb 12, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.16

Jan 27, 2020 GO-2021-0223 +2 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.15

Jan 9, 2020 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.14

Dec 4, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.13

Oct 31, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.12

Oct 17, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.11

Oct 17, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.10

Sep 25, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.9

Aug 15, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.8

Aug 13, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.7

Jul 8, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.6

Jun 11, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.5

May 6, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.4

Apr 11, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.3

Apr 8, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.2

Apr 5, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12.1

Mar 14, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12

Feb 25, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12rc1

Feb 11, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12beta2

Jan 10, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.12beta1

Dec 18, 2018 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.13

Aug 13, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.12

Jul 8, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.11

Jun 11, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.10

May 6, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.9

Apr 11, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.8

Apr 8, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.7

Apr 5, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.6

Mar 14, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.5

Jan 23, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.4

Dec 14, 2018 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.3

Dec 13, 2018 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.2

Nov 2, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11.1

Oct 1, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11

Aug 24, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11rc2

Aug 22, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11rc1

Aug 13, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11beta3

Aug 3, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11beta2

Jul 19, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.11beta1

Jun 26, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10.8

Jan 23, 2019 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10.7

Dec 14, 2018 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10.6

Dec 13, 2018 GO-2021-0223 +4 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10.5

Nov 2, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10.4

Aug 24, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10.3

Jun 6, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10.2

Apr 30, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10.1

Mar 29, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10

Feb 16, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

+ func MarshalPKCS1PublicKey(key *rsa.PublicKey) []byte

+ func MarshalPKCS8PrivateKey(key interface{}) ([]byte, error)

+ func ParsePKCS1PublicKey(der []byte) (*rsa.PublicKey, error)

type Certificate

+ ExcludedEmailAddresses []string

+ ExcludedIPRanges []*net.IPNet

+ ExcludedURIDomains []string

+ PermittedEmailAddresses []string

+ PermittedIPRanges []*net.IPNet

+ PermittedURIDomains []string

+ URIs []*url.URL

type CertificateInvalidError

+ Detail string

type CertificateRequest

+ URIs []*url.URL

type ExtKeyUsage

+ const ExtKeyUsageMicrosoftCommercialCodeSigning

+ const ExtKeyUsageMicrosoftKernelCodeSigning

type InvalidReason

+ const CANotAuthorizedForExtKeyUsage

+ const NameConstraintsWithoutSANs

+ const TooManyConstraints

+ const UnconstrainedName

type PublicKeyAlgorithm

+ func (algo PublicKeyAlgorithm) String() string

type VerifyOptions

+ MaxConstraintComparisions int

go1.10rc2

Feb 7, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10rc1

Jan 25, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10beta2

Jan 11, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.10beta1

Dec 7, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9.7

Jun 6, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9.6

Apr 30, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9.5

Mar 29, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9.4

Feb 7, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9.3

Jan 22, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9.2

Oct 25, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9.1

Oct 4, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9

Aug 24, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type Certificate

+ ExcludedDNSDomains []string

go1.9rc2

Aug 7, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9rc1

Jul 24, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9beta2

Jun 26, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.9beta1

Jun 14, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8.7

Feb 7, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8.6

Jan 23, 2018 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8.5

Oct 25, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8.5rc5

Oct 25, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8.5rc4

Oct 20, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8.4

Oct 4, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8.3

May 24, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8.2

May 23, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8.1

Apr 7, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8

Feb 16, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type InvalidReason

+ const NameMismatch

type SignatureAlgorithm

+ const SHA256WithRSAPSS

+ const SHA384WithRSAPSS

+ const SHA512WithRSAPSS

type UnknownAuthorityError

+ Cert *Certificate

go1.8rc3

Jan 26, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8rc2

Jan 19, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8rc1

Jan 10, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8beta2

Dec 15, 2016 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.8beta1

Dec 1, 2016 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7.6

May 23, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7.5

Jan 26, 2017 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7.4

Dec 1, 2016 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7.3

Oct 19, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7.2

Oct 17, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7.1

Sep 7, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7

Aug 15, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type CertPool

+ func SystemCertPool() (*CertPool, error)

type SystemRootsError

+ Err error

go1.7rc6

Aug 8, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7rc5

Aug 2, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7rc4

Aug 2, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7rc3

Jul 21, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7rc2

Jul 18, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7rc1

Jul 8, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7beta2

Jun 16, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.7beta1

Jun 2, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.6.4

Dec 1, 2016 GO-2021-0223 +5 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.6.3

Jul 18, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.6.2

Apr 19, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.6.1

Apr 11, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.6

Feb 17, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

+ type InsecureAlgorithmError SignatureAlgorithm

+ func (e InsecureAlgorithmError) Error() string

type SignatureAlgorithm

+ func (algo SignatureAlgorithm) String() string

go1.6rc2

Feb 3, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.6rc1

Jan 28, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.6beta2

Jan 13, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.6beta1

Dec 17, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.5.4

Apr 11, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.5.3

Jan 13, 2016 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.5.2

Dec 3, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.5.1

Sep 9, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.5

Aug 19, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type Certificate

+ UnhandledCriticalExtensions []asn1.ObjectIdentifier

type CertificateRequest

+ func (c *CertificateRequest) CheckSignature() (err error)

go1.5rc1

Aug 6, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.5beta3

Jul 29, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.5beta2

Jul 17, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.5beta1

Jul 7, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.4.3

Sep 23, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.4.2

Feb 18, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.4.1

Jan 15, 2015 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.4

Dec 11, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

type Certificate

+ MaxPathLenZero bool

go1.4rc2

Dec 2, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.4rc1

Nov 17, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.4beta1

Oct 30, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.3.3

Oct 1, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.3.2

Sep 25, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.3.1

Aug 13, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.3

Jun 19, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

+ func CreateCertificateRequest(rand io.Reader, template *CertificateRequest, priv interface{}) (csr []byte, err error)

+ type CertificateRequest struct

+ Attributes []pkix.AttributeTypeAndValueSET

+ DNSNames []string

+ EmailAddresses []string

+ Extensions []pkix.Extension

+ ExtraExtensions []pkix.Extension

+ IPAddresses []net.IP

+ PublicKey interface{}

+ PublicKeyAlgorithm PublicKeyAlgorithm

+ Raw []byte

+ RawSubject []byte

+ RawSubjectPublicKeyInfo []byte

+ RawTBSCertificateRequest []byte

+ Signature []byte

+ SignatureAlgorithm SignatureAlgorithm

+ Subject pkix.Name

+ Version int

+ func ParseCertificateRequest(asn1Data []byte) (*CertificateRequest, error)

go1.3rc2

Jun 13, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.3rc1

Jun 2, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.3beta2

May 21, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.3beta1

Apr 22, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.2.2

May 5, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.2.1

Mar 3, 2014 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.2

Nov 28, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

+ func MarshalECPrivateKey(key *ecdsa.PrivateKey) ([]byte, error)

type Certificate

+ CRLDistributionPoints []string

+ Extensions []pkix.Extension

+ ExtraExtensions []pkix.Extension

+ IssuingCertificateURL []string

+ OCSPServer []string

go1.2rc5

Nov 18, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.2rc4

Nov 13, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.2rc3

Nov 1, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.2rc2

Oct 18, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.1.2

Aug 13, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.1.1

Jun 13, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.1

May 13, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

+ var IncorrectPasswordError = errors.New("x509: decryption password incorrect")

+ func DecryptPEMBlock(b *pem.Block, password []byte) ([]byte, error)

+ func EncryptPEMBlock(rand io.Reader, blockType string, data, password []byte, alg PEMCipher) (*pem.Block, error)

+ func IsEncryptedPEMBlock(b *pem.Block) bool

+ func ParseECPrivateKey(der []byte) (key *ecdsa.PrivateKey, err error)

type Certificate

+ IPAddresses []net.IP

type ExtKeyUsage

+ const ExtKeyUsageIPSECEndSystem

+ const ExtKeyUsageIPSECTunnel

+ const ExtKeyUsageIPSECUser

+ const ExtKeyUsageMicrosoftServerGatedCrypto

+ const ExtKeyUsageNetscapeServerGatedCrypto

type InvalidReason

+ const IncompatibleUsage

+ type PEMCipher int

+ const PEMCipher3DES

+ const PEMCipherAES128

+ const PEMCipherAES192

+ const PEMCipherAES256

+ const PEMCipherDES

type PublicKeyAlgorithm

+ const ECDSA

type SignatureAlgorithm

+ const ECDSAWithSHA1

+ const ECDSAWithSHA256

+ const ECDSAWithSHA384

+ const ECDSAWithSHA512

+ type SystemRootsError struct

+ func (e SystemRootsError) Error() string

type VerifyOptions

+ KeyUsages []ExtKeyUsage

go1.1rc3

May 8, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.1rc2

May 7, 2013 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.0.3

Sep 21, 2012 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.0.2

Jun 14, 2012 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1.0.1

Apr 26, 2012 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

go1

Mar 28, 2012 GO-2021-0223 +6 more

GO-2021-0223: Certificate verification error on Windows in crypto/x509

GO-2022-0171: Mishandled trust preferences for root certificates on Darwin in crypto/x509

GO-2022-0191: Denial of service in chain verification in crypto/x509

GO-2022-0229: Panic in certificate parsing in crypto/x509 and golang.org/x/crypto/cryptobyte

GO-2022-0535: Certificate validation bypass on Windows in crypto/x509

GO-2024-2598: Verify panics on certificates with an unknown public key algorithm in crypto/x509

GO-2025-3373: Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509

Changes in this version

+ var ErrUnsupportedAlgorithm = errors.New("crypto/x509: cannot verify signature: algorithm unimplemented")

+ func CreateCertificate(rand io.Reader, template, parent *Certificate, pub interface{}, ...) (cert []byte, err error)

+ func MarshalPKCS1PrivateKey(key *rsa.PrivateKey) []byte

+ func MarshalPKIXPublicKey(pub interface{}) ([]byte, error)

+ func ParseCRL(crlBytes []byte) (certList *pkix.CertificateList, err error)

+ func ParseDERCRL(derBytes []byte) (certList *pkix.CertificateList, err error)

+ func ParsePKCS1PrivateKey(der []byte) (key *rsa.PrivateKey, err error)

+ func ParsePKCS8PrivateKey(der []byte) (key interface{}, err error)

+ func ParsePKIXPublicKey(derBytes []byte) (pub interface{}, err error)

+ type CertPool struct

+ func NewCertPool() *CertPool

+ func (s *CertPool) AddCert(cert *Certificate)

+ func (s *CertPool) AppendCertsFromPEM(pemCerts []byte) (ok bool)

+ func (s *CertPool) Subjects() (res [][]byte)

+ type Certificate struct

+ AuthorityKeyId []byte

+ BasicConstraintsValid bool

+ DNSNames []string

+ EmailAddresses []string

+ ExtKeyUsage []ExtKeyUsage

+ IsCA bool

+ Issuer pkix.Name

+ KeyUsage KeyUsage

+ MaxPathLen int

+ NotAfter time.Time

+ NotBefore time.Time

+ PermittedDNSDomains []string

+ PermittedDNSDomainsCritical bool

+ PolicyIdentifiers []asn1.ObjectIdentifier

+ PublicKey interface{}

+ PublicKeyAlgorithm PublicKeyAlgorithm

+ Raw []byte

+ RawIssuer []byte

+ RawSubject []byte

+ RawSubjectPublicKeyInfo []byte

+ RawTBSCertificate []byte

+ SerialNumber *big.Int

+ Signature []byte

+ SignatureAlgorithm SignatureAlgorithm

+ Subject pkix.Name

+ SubjectKeyId []byte

+ UnknownExtKeyUsage []asn1.ObjectIdentifier

+ Version int

+ func ParseCertificate(asn1Data []byte) (*Certificate, error)

+ func ParseCertificates(asn1Data []byte) ([]*Certificate, error)

+ func (c *Certificate) CheckCRLSignature(crl *pkix.CertificateList) (err error)

+ func (c *Certificate) CheckSignature(algo SignatureAlgorithm, signed, signature []byte) (err error)

+ func (c *Certificate) CheckSignatureFrom(parent *Certificate) (err error)

+ func (c *Certificate) CreateCRL(rand io.Reader, priv interface{}, revokedCerts []pkix.RevokedCertificate, ...) (crlBytes []byte, err error)

+ func (c *Certificate) Equal(other *Certificate) bool

+ func (c *Certificate) Verify(opts VerifyOptions) (chains [][]*Certificate, err error)

+ func (c *Certificate) VerifyHostname(h string) error

+ type CertificateInvalidError struct

+ Cert *Certificate

+ Reason InvalidReason

+ func (e CertificateInvalidError) Error() string

+ type ConstraintViolationError struct

+ func (ConstraintViolationError) Error() string

+ type ExtKeyUsage int

+ const ExtKeyUsageAny

+ const ExtKeyUsageClientAuth

+ const ExtKeyUsageCodeSigning

+ const ExtKeyUsageEmailProtection

+ const ExtKeyUsageOCSPSigning

+ const ExtKeyUsageServerAuth

+ const ExtKeyUsageTimeStamping

+ type HostnameError struct

+ Certificate *Certificate

+ Host string

+ func (h HostnameError) Error() string

+ type InvalidReason int

+ const CANotAuthorizedForThisName

+ const Expired

+ const NotAuthorizedToSign

+ const TooManyIntermediates

+ type KeyUsage int

+ const KeyUsageCRLSign

+ const KeyUsageCertSign

+ const KeyUsageContentCommitment

+ const KeyUsageDataEncipherment

+ const KeyUsageDecipherOnly

+ const KeyUsageDigitalSignature

+ const KeyUsageEncipherOnly

+ const KeyUsageKeyAgreement

+ const KeyUsageKeyEncipherment

+ type PublicKeyAlgorithm int

+ const DSA

+ const RSA

+ const UnknownPublicKeyAlgorithm

+ type SignatureAlgorithm int

+ const DSAWithSHA1

+ const DSAWithSHA256

+ const MD2WithRSA

+ const MD5WithRSA

+ const SHA1WithRSA

+ const SHA256WithRSA

+ const SHA384WithRSA

+ const SHA512WithRSA

+ const UnknownSignatureAlgorithm

+ type UnhandledCriticalExtension struct

+ func (h UnhandledCriticalExtension) Error() string

+ type UnknownAuthorityError struct

+ func (e UnknownAuthorityError) Error() string

+ type VerifyOptions struct

+ CurrentTime time.Time

+ DNSName string

+ Intermediates *CertPool

+ Roots *CertPool

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL