crypto/x509: func (*Certificate) CheckSignatureFrom

[yan-di]

The signature of the function in the x509 package is "func (c * Certificate) CheckSignatureFrom (parent * Certificate) error". When c is an intermediate CA certificate and the same intermediate CA certificate is passed to the parent, the function does not report any errors; When c is a root CA certificate and parent passes in an intermediate CA certificate, the function does not report any errors; When c is any intermediate certificate and parent passes in any root certificate that is not issuing the c certificate, the function does not report any errors.

[gabyhelp]

Related Issues and Documentation

• [Package x509 > type Certificate
  ¶

   	 \> func (\*Certificate) CheckSignatureFrom
   			¶
   			
   			
   		](https://go.dev/pkg/crypto/x509/?m=old#Certificate.CheckSignatureFrom) <!-- score=0.91711 -->
  

• [Package x509 > type CertificateRequest
  ¶

   		1.3
   	 \> func (\*CertificateRequest) CheckSignature
   			¶
   			
   			1.5
   		](https://go.dev/pkg/crypto/x509/?m=old#CertificateRequest.CheckSignature) <!-- score=0.86724 -->
  

• [Package x509 > type RevocationList
  ¶

   		1.15
   	 \> func (\*RevocationList) CheckSignatureFrom
   			¶
   			
   			1.19
   		](https://go.dev/pkg/crypto/x509/?m=old#RevocationList.CheckSignatureFrom) <!-- score=0.85030 -->
  

• [Package x509 > type Certificate
  ¶

   	 \> func (\*Certificate) CheckSignature
   			¶
   			
   			
   		](https://go.dev/pkg/crypto/x509/?m=old#Certificate.CheckSignature) <!-- score=0.84384 -->
  

_{(Emoji vote if this was helpful or unhelpful; more detailed feedback welcome in this discussion.)}

[seankhliao]

Please include a reproducer for the issue, also note the function docs:

This is a low-level API that performs very limited checks, and not a full path verifier. Most users should use Certificate.Verify instead.