crypto/x509
A package in the Go standard library for parsing and verifying X.509 certificates. It handles certificate chain construction, signature verification, and enforcement of trust policies.
Timeline (last 90 days)
Future versions of the Go language will reject certificate chains containing eight specific SPKIs (Subject Public Key Info).
When validating a certificate chain, Go's crypto/x509 package computes the SPKI hash of each certificate in the chain and compares it against a built-in blacklist, terminating validation upon a match.
The crypto/x509 package in the Go standard library has a built-in trust policy for root and intermediate certificates that is independent of the root certificate stores maintained by operating systems or browsers.
All Facts (3)
When validating a certificate chain, Go's crypto/x509 package computes the SPKI hash of each certificate in the chain and compares it against a built-in blacklist, terminating validation upon a match.
50%UnverifiedThe crypto/x509 package in the Go standard library has a built-in trust policy for root and intermediate certificates that is independent of the root certificate stores maintained by operating systems or browsers.
50%UnverifiedFuture versions of the Go language will reject certificate chains containing eight specific SPKIs (Subject Public Key Info).
50%