Roland Shoemaker 793ad666bf acme/autocert: properly clean DirCache paths ...

Don't assume the path passed into the DirCache methods is absolute, and
clean it before further operating on it. Put and Delete are not attacker
controlled, but clean them anyway.

Fixes #53082
Fixes CVE-2022-30636

Change-Id: I755f525a737da60ccba07ebce4d41cc8faebfcca
Reviewed-on: https://go-review.googlesource.com/c/crypto/+/408694
Run-TryBot: Roland Shoemaker <roland@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>

2022-05-25 23:09:36 +00:00

..

autocert

acme/autocert: properly clean DirCache paths

2022-05-25 23:09:36 +00:00

internal/acmeprobe

all: gofmt

2022-04-11 22:02:26 +00:00

acme_test.go

acme: remove support for pre-RFC 8555 ACME spec

2022-02-09 15:49:31 +00:00

acme.go

acme: add AccountKeyRollover

2022-05-16 16:29:34 +00:00

http_test.go

acme: remove support for pre-RFC 8555 ACME spec

2022-02-09 15:49:31 +00:00

http.go

acme: fix deadlock when Client.Key is nil

2021-08-17 16:40:53 +00:00

jws_test.go

acme: add AccountKeyRollover

2022-05-16 16:29:34 +00:00

jws.go

acme: add AccountKeyRollover

2022-05-16 16:29:34 +00:00

rfc8555_test.go

acme: DeactivateReg fix panic

2022-05-18 03:45:28 +00:00

rfc8555.go

acme: DeactivateReg fix panic

2022-05-18 03:45:28 +00:00

types_test.go

acme: add support for subproblems

2021-04-21 17:06:49 +00:00

types.go

acme: remove support for pre-RFC 8555 ACME spec

2022-02-09 15:49:31 +00:00

version_go112.go

all: go fmt ./...

2021-02-20 03:31:48 +00:00