crypto/x509

New Issue

Verify fails to find valid path when some paths have EKU constraint violationsNeedsInvestigation

#48869 opened 1 week ago by JackOfMostTrades

invalid RDNSequence: invalid attribute value: unsupported string type: 4NeedsInvestigation

#48371 opened 1 month ago by c00w

unable to parse certificate with rsassa-pss algorithmNeedsInvestigation

#48314 opened 1 month ago by jpduckwo

invalid RDNSequence: invalid attribute value: unsupported string type: 18NeedsInvestigation

#48171 opened 1 month ago by mic6090

inner and outer signature algorithm identifiers don't matchNeedsInvestigation

#47689 opened 2 months ago by groob

support OIDs for tcg-kp (2.23.133.8)NeedsInvestigation

#47620 opened 2 months ago by tracefinder

use platform verifier on Windows, macOS and iOSProposalProposal-AcceptedProposal-CryptoProposal-FinalCommentPeriod

#46287 opened 5 months ago by FiloSottile

add CertPool.EqualProposalProposal-AcceptedProposal-CryptoProposal-FinalCommentPeriod

#46057 opened 5 months ago by dnephin

can't verify signature on RSA-PSS certificate requests it createdNeedsInvestigation

#45990 opened 5 months ago by ycongal-smile

add a PKITS testNeedsFixTestinghelp wanted

#45857 opened 5 months ago by FiloSottile

enforce Name Constraints on intermediates with SANsNeedsFix

#45856 opened 5 months ago by FiloSottile

store stripped down trust anchorsNeedsInvestigation

#44298 opened 8 months ago by rolandshoemaker

add crypto/x509/rootcerts package and rootcerts tag to embed CA root certificates in programProposalProposal-Crypto

#43958 opened 8 months ago by breml

Export wrong parse function errorProposalProposal-Crypto

#43780 opened 9 months ago by joeshaw

decryption of PEM file failure not being caughtProposalProposal-Crypto

#43504 opened 9 months ago by pschou

ParseCertificate and ParseCertificates return different errors with a single bad certificate suppliedNeedsInvestigation

#43113 opened 10 months ago by LujunWeng

failed to load system roots and no roots providedNeedsInvestigation

#42414 opened 11 months ago by Poor12

consider removing support for signing with RSA-MD5NeedsInvestigation

#42125 opened 1 year ago by rolandshoemaker

add ability to reload root certificatesNeedsDecisionProposal-Crypto

#41888 opened 1 year ago by dtoubelis

reject SHA-1 signatures in VerifyNeedsFixProposalProposal-AcceptedProposal-CryptoSecurity

#41682 opened 1 year ago by FiloSottile

Google Cloud SQL TLS connections broken in Go 1.15+NeedsInvestigation

#40748 opened 1 year ago by kristiandrucker

check the Key Usage extensionNeedsFix

#40100 opened 1 year ago by FiloSottile

implement OCSP verifierProposalProposal-CryptoProposal-Hold

#40017 opened 1 year ago by FiloSottile

Trust relationship of certs returned by 'x509.SystemCertPool()' is ambiguousNeedsInvestigation

#39540 opened 1 year ago by stephen-fox

add support for PBES2 private keysNeedsInvestigationProposal

#39241 opened 1 year ago by shibe2

Can 'CertPool.contains()' be made public?NeedsInvestigation

#39179 opened 1 year ago by stephen-fox

properly handle errSecInvalidTrustSettings in macOS rootsNeedsInvestigationOS-Darwin

#38888 opened 1 year ago by FiloSottile

stop looking at first root storeNeedsFix

#38869 opened 1 year ago by FiloSottile

update bundled iOS rootsNeedsFixrecurringrelease-blocker

#38843 opened 1 year ago by FiloSottile

failed to parse Intermediate CA certificateNeedsInvestigation

#38737 opened 1 year ago by sebastien-rosset

support policyQualifiers in certificatePolicies extensionNeedsInvestigation

#38116 opened 2 years ago by rolandshoemaker

certificate validation in Windows fails to validate IP in SANNeedsInvestigationOS-Windows

#37176 opened 2 years ago by ihgann

Convenient, efficient way to reload a certificate pool after on-disk changesNeedsInvestigation

#35887 opened 2 years ago by wking

untrusted intermediates are not used on macOSNeedsInvestigationOS-Darwin

#35631 opened 2 years ago by mariusgrigoriu

enable deep copy of x509.CertPoolNeedsInvestigation

#35044 opened 2 years ago by wbl

select a certificate store for systemVerify on WindowsNeedsInvestigationOS-Windows

#34977 opened 2 years ago by SeanBurford

expose hash algorithm for SignatureAlgorithmNeedsInvestigationProposalProposal-Crypto

#33317 opened 2 years ago by bodgit

unable to parse certificate parsable by JavaNeedsDecision

#33259 opened 2 years ago by tomjamescn

ability to add custom curve when parsing X509 certificateProposalProposal-CryptoProposal-Hold

#32874 opened 2 years ago by trung

unexpected name mismatch errorNeedsInvestigationUnfortunate

#31440 opened 2 years ago by sneis

ObjectIdentifier and ParseCertificate do not support int > 31 bits, preventing support of OID 2.25 (/UUID) (follow-up on #19933)NeedsInvestigation

#30757 opened 2 years ago by vpelletier

RSAES-OAEP supportFeatureRequestNeedsInvestigation

#30416 opened 2 years ago by DenisKarch

DN OU orderingNeedsInvestigation

#29040 opened 2 years ago by rikkuness

verify checks root certificateNeedsInvestigation

#28971 opened 2 years ago by vit3k

reduce memory usage when parsing system root certs?NeedsInvestigationPerformance

#26731 opened 3 years ago by bradfitz

doc: clarify package is aimed towards Web PKI support DocumentationNeedsFix

#26624 opened 3 years ago by adamdecaf

http.Response.TLS.VerifiedChains behavior changed in go1.9NeedsInvestigation

#24685 opened 3 years ago by nolith

ensure CreateCertificate won't generate unparsable certificatesNeedsFixTestinghelp wanted

#24156 opened 3 years ago by FiloSottile

Provide a mechanism for accessing SRVNamesProposalProposal-AcceptedProposal-Crypto

#21789 opened 4 years ago by SamWhited

AKI is left blank even for non-self-signed cert when subject matches CA's subject fieldNeedsInvestigation

#20002 opened 4 years ago by mikesmitty

TestSystemVerify failures on windows-*-2008 buildersBuildersOS-WindowsTestinghelp wanted

#19564 opened 4 years ago by josharian

FetchPEMRoots on macOS takes 20 seconds when there are a lot of trust settingsNeedsInvestigationOS-Darwin

#19561 opened 4 years ago by tbodt

make SystemCertPool work on Windows?NeedsFixOS-Windowshelp wanted

#16736 opened 5 years ago by bradfitz

CertificateRequest does not support attributes not covered by pkix.AttributeTypeAndValueSET

#15995 opened 5 years ago by groob

support DirectoryName name constraintsNeedsDecision

#15196 opened 5 years ago by vanbroup

no support for parsing encrypted PKCS8 private keysFeatureRequest

#8860 opened 7 years ago by gopherbot

add more detail to the error message arising from a missing hash function.NeedsFixhelp wanted

#7735 opened 7 years ago by agl