Skip to content

crypto/x509: ParseRevocationList accepts authorityCertSerialNumber set to 0 #73293

Description

@onepeople158

Go version

go version go1.24.2 linux/amd64

Output of go env in your module/workspace:

CN=US,OU=US,O=US,L=US,ST=US,C=US
2025-01-01 00:00:00 +0000 UTC
2025-12-01 00:00:00 +0000 UTC
134026152402537916809419830168838464
1
Key Identifier: ef69e0f7d51de699ecdc6dd0f7e2b95c64718335
Authority Cert Serial Number:0

What did you do?

Hello Developer:
I have a CRL file where the authorityCertSerialNumber field in the AKI extension is set to 0. Go successfully parsed the authorityCertSerialNumber field without any errors. However, according to RFC5280, the authorityCertSerialNumber field stores the certificate serial number, which must be a positive integer.So, is this a bug?

What did you see happen?

Go parsed a CRL file with the authorityCertSerialNumber set to 0.

What did you expect to see?

main.zip

Metadata

Metadata

Assignees

No one assigned

    Labels

    BugReportIssues describing a possible bug in the Go implementation.NeedsInvestigationSomeone must examine and confirm this is a valid issue and not a duplicate of an existing one.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions