go/src/crypto
Roland Shoemaker c177d9d98a crypto/x509: restrict CRL number to <=20 octets
Similar to certificate serial numbers, RFC 5280 restricts the length of
the CRL number field to no more than 20 octets. Enforce this in
CreateRevocationList.

Fixes #53543

Change-Id: If392ef6b0844db716ae9ee6ef317135fceab039c
Reviewed-on: https://go-review.googlesource.com/c/go/+/415134
Auto-Submit: Roland Shoemaker <roland@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Run-TryBot: Roland Shoemaker <roland@golang.org>
2022-07-07 19:43:03 +00:00
..
aes all: boringcrypto post-merge cleanup 2022-06-06 19:10:07 +00:00
boring [dev.boringcrypto] all: add boringcrypto build tags 2022-04-29 14:23:22 +00:00
cipher all: gofmt main repo 2022-04-11 16:34:30 +00:00
des all: fix some lint issues 2022-05-08 17:27:54 +00:00
dsa
ecdsa crypto/internal/boring: factor Cache into crypto/internal/boring/bcache 2022-06-27 11:50:31 +00:00
ed25519 crypto/ed25519/internal/edwards25519: move to crypto/internal/edwards25519 2022-05-05 21:53:10 +00:00
elliptic crypto/elliptic/internal/nistec: move to crypto/internal/nistec 2022-05-05 21:53:03 +00:00
hmac all: boringcrypto post-merge cleanup 2022-06-06 19:10:07 +00:00
internal crypto/internal/boring: factor Cache into crypto/internal/boring/bcache 2022-06-27 11:50:31 +00:00
md5
rand all: boringcrypto post-merge cleanup 2022-06-06 19:10:07 +00:00
rc4
rsa crypto/internal/boring: factor Cache into crypto/internal/boring/bcache 2022-06-27 11:50:31 +00:00
sha1 [dev.boringcrypto] crypto/internal/boring: make SHA calls allocation-free 2022-04-29 14:23:27 +00:00
sha256 crypto/internal/boring: avoid false positive in cgo pointer check in SHA calls 2022-05-05 19:31:33 +00:00
sha512 [dev.boringcrypto] crypto/internal/boring: make SHA calls allocation-free 2022-04-29 14:23:27 +00:00
subtle crypto/subtle: note that input length mismatch makes ConstantTimeCompare return immediately 2022-04-05 01:54:27 +00:00
tls all: boringcrypto post-merge cleanup 2022-06-06 19:10:07 +00:00
x509 crypto/x509: restrict CRL number to <=20 octets 2022-07-07 19:43:03 +00:00
crypto.go all: gofmt main repo 2022-04-11 16:34:30 +00:00
issue21104_test.go