Go will reject certificate chains containing eight distrusted SPKIs

github.com

Go will reject certificate chains containing eight distrusted SPKIs

github.com

RSS BotBM to Lobste.rsEnglish · 6 hours ago

[release-branch.go1.27] crypto/x509: distrust a handful of intermediates · golang/go@90617fb

github.com

Filter a set of intermediates from chains returned by calls to Verify. These chains are identified via SHA-256 SPKI hashes. Fixes CVE-2026-111943 For golang/go#82345 Fixes golang/go#82349 Change-...

I downloaded the CA cert data from <a href=“https://www.ccadb.org/resources” rel=“ugc”>https://www.ccadb.org/resources</a> and it seems to be affecting 16 certs, all from eMudhra. I complied the list here <a href=“https://gist.github.com/mendymm/ff7a9fd00339260b4d2dbdcb0f489b57” rel=“ugc”>https://gist.github.com/mendymm/ff7a9fd00339260b4d2dbdcb0f489b57</a> Comments

You must log in or register to comment.

Chat