What version of Go are you using (go version)?
$ go version
go version go1.18.2 linux/amd64
Does this issue reproduce with the latest release?
Yes.
What did you do?
I created a CRL template containing a very large CRL Number. I passed this template to CreateRevocationList.
See https://go.dev/play/p/EcM1FoNQb_P for a running example.
What did you expect to see?
An error, because CreateRevocationList() says that it "creates a new X.509 v2 Certificate Revocation List, according to RFC 5280", but RFC 5280 says "Conforming CRL issuers MUST NOT use CRLNumber values longer than 20 octets.".
What did you see instead?
Success, and the creation of a CRL whose CRLNumber is longer than 20 octets.
What version of Go are you using (
go version)?Does this issue reproduce with the latest release?
Yes.
What did you do?
I created a CRL template containing a very large CRL Number. I passed this template to
CreateRevocationList.See https://go.dev/play/p/EcM1FoNQb_P for a running example.
What did you expect to see?
An error, because
CreateRevocationList()says that it "creates a new X.509 v2 Certificate Revocation List, according to RFC 5280", but RFC 5280 says "Conforming CRL issuers MUST NOT use CRLNumber values longer than 20 octets.".What did you see instead?
Success, and the creation of a CRL whose CRLNumber is longer than 20 octets.