crypto/x509

New Issue

support policyQualifiers in certificatePolicies extensionNeedsInvestigation

#38116 opened 3 days ago by rolandshoemaker

RSA-PSS signatures on certificates should be encoded without optional NULLsNeedsFix

#38014 opened 1 week ago by DemiMarie-parity

documentation about SSL_CERT_FILE and SSL_CERT_DIR is incorrectDocumentationNeedsInvestigation

#37907 opened 1 week ago by elagergren-spideroak

check that private key matches the issuerNeedsFix

#37845 opened 2 weeks ago by shoobyban

Certificate parsing/verification supports non-compliant dNSName constraintsNeedsInvestigation

#37535 opened 1 month ago by rolandshoemaker

certificate validation in Windows fails to validate IP in SANNeedsInvestigationOS-Windows

#37176 opened 1 month ago by ihgann

parse additional fields in CertificateRequestNeedsFixProposal-AcceptedProposal-Crypto

#37172 opened 1 month ago by chauncyc

Convenient, efficient way to reload a certificate pool after on-disk changesNeedsInvestigation

#35887 opened 4 months ago by wking

untrusted intermediates are not used on macOSNeedsInvestigationOS-Darwin

#35631 opened 4 months ago by mariusgrigoriu

Reference SubjectPublicKeyInfo in MarshalPKIXPublicKeyDocumentationNeedsFixhelp wanted

#35313 opened 5 months ago by jsha

enable deep copy of x509.CertPoolNeedsInvestigation

#35044 opened 5 months ago by wbl

select a certificate store for systemVerify on WindowsNeedsInvestigationOS-Windows

#34977 opened 5 months ago by SeanBurford

x509ignoreCN=1 breaks TestCertificateParseNeedsFixTesting

#34252 opened 6 months ago by tmthrgd

expose hash algorithm for SignatureAlgorithmNeedsInvestigationProposalProposal-Crypto

#33317 opened 8 months ago by bodgit

unable to parse certificate parsable by JavaNeedsInvestigationWaitingForInfo

#33259 opened 8 months ago by tomjamescn

ability to add custom curve when parsing X509 certificateProposalProposal-CryptoProposal-Hold

#32874 opened 9 months ago by trung

replace MD5 in PEM encryption?NeedsInvestigation

#32777 opened 9 months ago by micahhyman1

link Security.framework symbols without cgoNeedsFixOS-Darwin

#32604 opened 9 months ago by FiloSottile

unexpected name mismatch errorNeedsInvestigationUnfortunate

#31440 opened 11 months ago by sneis

encoding/asn1.ObjectIdentifier and crypto/x509.ParseCertificate do not support int > 31 bits, preventing support of OID 2.25 (/UUID) (follow-up on #19933)NeedsInvestigation

#30757 opened 1 year ago by vpelletier

RSAES-OAEP supportFeatureRequestNeedsInvestigation

#30416 opened 1 year ago by DenisKarch

certificates with AKID don't chain to parents without SKIDNeedsFix

#30079 opened 1 year ago by FiloSottile

DN OU orderingNeedsInvestigation

#29040 opened 1 year ago by rikkuness

verify checks root certificateNeedsInvestigation

#28971 opened 1 year ago by vit3k

Insufficient verification of ServerName when certificate is wildcardNeedsFix

#27591 opened 2 years ago by int-tt

add functions to download certificates from windows update, and retrieve certificates from windows x509storesOS-WindowsProposalProposal-Crypto

#26950 opened 2 years ago by jeet-parekh

reduce memory usage when parsing system root certs?Performance

#26731 opened 2 years ago by bradfitz

add SubjectKeyId automatically when IsCA is trueNeedsFix

#26676 opened 2 years ago by FiloSottile

doc: clarify package is aimed towards Web PKI support DocumentationNeedsFix

#26624 opened 2 years ago by adamdecaf

reject UTF-8 namesNeedsFix

#26362 opened 2 years ago by FiloSottile

http.Response.TLS.VerifiedChains behavior changed in go1.9NeedsInvestigation

#24685 opened 2 years ago by nolith

multi-value RDN sequence is not properly DER-orderedNeedsFixearly-in-cyclerelease-blocker

#24254 opened 2 years ago by mrogers950

ensure CreateCertificate won't generate unparsable certificatesNeedsFixTestinghelp wanted

#24156 opened 2 years ago by FiloSottile

NameConstraintsWithoutSANs when checking signing certificateNeedsFix

#24151 opened 2 years ago by thsnr

Provide a mechanism for accessing SRVNamesProposalProposal-AcceptedProposal-Crypto

#21789 opened 2 years ago by SamWhited

does not notice if an RSA SignatureAlgorithm is missing parametersNeedsFix

#21118 opened 2 years ago by agl

AKI is left blank even for non-self-signed cert when subject matches CA's subject fieldNeedsInvestigation

#20002 opened 2 years ago by mikesmitty

TestSystemVerify failures on windows-386-2008 builderBuildersOS-WindowsTestinghelp wanted

#19564 opened 3 years ago by josharian

FetchPEMRoots on macOS takes 20 seconds when there are a lot of trust settingsNeedsInvestigationOS-Darwinhelp wanted

#19561 opened 3 years ago by tbodt

make SystemCertPool work on Windows?NeedsFixOS-Windowshelp wanted

#16736 opened 3 years ago by bradfitz

CertificateRequest does not support attributes not covered by pkix.AttributeTypeAndValueSET

#15995 opened 3 years ago by groob

support DirectoryName name constraintsNeedsDecision

#15196 opened 4 years ago by vanbroup

no support for parsing encrypted PKCS8 private keysFeatureRequest

#8860 opened 5 years ago by gopherbot

add more detail to the error message arising from a missing hash function.NeedsFixhelp wanted

#7735 opened 6 years ago by agl