Go version
latest or older
Output of go env in your module/workspace:
What did you do?
The cryptographic library in the Go programming language includes low-level functions for parsing CRLs.
However, it lacks any implementation for CRL semantic checks (e.g., does not check
whether the CRL is expired). Even the certificate validation logic in Go’s X509 pack-
age does not perform revocation checking, nor does it provide any API interface to
supply CRLs as input for validation.
What did you see happen?
Expired CRL is accepted during CRL revocation checking of a certificate
What did you expect to see?
CRL is expired. Thus, certificate validation must fail
Go version
latest or older
Output of
go envin your module/workspace:What did you do?
The cryptographic library in the Go programming language includes low-level functions for parsing CRLs.
However, it lacks any implementation for CRL semantic checks (e.g., does not check
whether the CRL is expired). Even the certificate validation logic in Go’s X509 pack-
age does not perform revocation checking, nor does it provide any API interface to
supply CRLs as input for validation.
What did you see happen?
Expired CRL is accepted during CRL revocation checking of a certificate
What did you expect to see?
CRL is expired. Thus, certificate validation must fail