Nicola Murino
b9229ecc70
checkSourceAddressCriticalOption treated a source-address critical option with an empty value as if the option was absent, allowing authentication from any address. A callback (or certificate authority) building the value dynamically from an empty allowlist would intend to deny all sources, not to lift the restriction. This also contradicts the documented contract that the option is validated whenever it is present, and differs from OpenSSH, where an empty address list matches nothing. Change-Id: I1c0de27cbcab8817a7ff446019c25cd19957a7d7 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/797041 LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com> Reviewed-by: David Chase <drchase@google.com> Reviewed-by: Junyang Shao <shaojunyang@google.com> Reviewed-by: Filippo Valsorda <filippo@golang.org>
Go Cryptography
This repository holds supplementary Go cryptography packages.
Report Issues / Send Patches
This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://go.dev/doc/contribute.
The git repository is https://go.googlesource.com/crypto.
The main issue tracker for the crypto repository is located at https://go.dev/issues. Prefix your issue with "x/crypto:" in the subject line, so it is easy to find.
Note that contributions to the cryptography package receive additional scrutiny due to their sensitive nature. Patches may take longer than normal to receive feedback.