]> Cypherpunks.ru repositories - gostls13.git/commit
[dev.boringcrypto] crypto/x509: remove VerifyOptions.IsBoring
authorRuss Cox <rsc@golang.org>
Wed, 27 Apr 2022 13:02:53 +0000 (09:02 -0400)
committerRuss Cox <rsc@golang.org>
Fri, 29 Apr 2022 14:23:29 +0000 (14:23 +0000)
commit0184fe5ece4f84fda9db04d2472b76efcaa8ef55
tree46d2538ae712570da44013bf6301403bbecda4a3
parent9e9c7a0aec0f821b54006681d4fdfba8a0cd6679
[dev.boringcrypto] crypto/x509: remove VerifyOptions.IsBoring

This API was added only for BoringCrypto, never shipped in standard
Go. This API is also not compatible with the expected future evolution
of crypto/x509, as we move closer to host verifiers on macOS and Windows.

If we want to merge BoringCrypto into the main tree, it is best not to
have differing API. So instead of a hook set by crypto/tls, move the
actual check directly into crypto/x509, eliminating the need for
exposed API.

For #51940.

Change-Id: Ia2ae98c745de818d39501777014ea8166cab0b03
Reviewed-on: https://go-review.googlesource.com/c/go/+/395878
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Russ Cox <rsc@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
api/go1.9.txt
src/crypto/internal/boring/stub.s [new file with mode: 0644]
src/crypto/tls/boring.go
src/crypto/tls/boring_test.go
src/crypto/tls/handshake_client.go
src/crypto/tls/handshake_server.go
src/crypto/tls/notboring.go
src/crypto/x509/boring.go [new file with mode: 0644]
src/crypto/x509/boring_test.go [new file with mode: 0644]
src/crypto/x509/notboring.go [new file with mode: 0644]
src/crypto/x509/verify.go