420870623a70591d5e0b187c77c95455a1224ca6
A certificate must have the Server Auth Extended Key Usage to be used for TLS, and an ECDSA certificate must have the Digital Signature Key Usage to be used at all (you can't encrypt to an ECDSA key). crypto/tls ignores (E)KUs when serving certificates, and most browsers do as well, so it works, but OpenSSL would refuse to serve these certificates, and clients would be allowed to reject them. Change-Id: I699e58e613f01077e6b67fdb9e789d46e1672112 Reviewed-on: https://go-review.googlesource.com/39913 Run-TryBot: Alex Vaghin <ddos@google.com> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Alex Vaghin <ddos@google.com>
This repository holds supplementary Go cryptography libraries. To submit changes to this repository, see http://golang.org/doc/contribute.html.
Description
Mirror of ys-ll/crypto (GitHub), kept for paraterm builds
https://golang.org/x/crypto
8.1 MiB
Languages
Go
88.6%
Assembly
11.1%
C
0.3%