• Adam Langley's avatar
    crypto/x509: parse all names in an RDN. · 809a1de1
    Adam Langley authored
    The Subject and Issuer names in a certificate look like they should be a
    list of key-value pairs. However, they're actually a list of lists of
    key-value pairs. Previously we only looked at the first element of each
    sublist and the vast majority of certificates only have one element per
    sublist.
    
    However, it's possible to have multiple elements and some 360
    certificates from the “Pilot” log are so constructed.
    
    This change causes all elements of the sublists to be processed.
    
    Fixes #16836.
    
    Change-Id: Ie0a5159135b08226ec517fcf251aa17aada37857
    Reviewed-on: https://go-review.googlesource.com/30810Reviewed-by: 's avatarBrad Fitzpatrick <bradfitz@golang.org>
    809a1de1
pkix.go 5.97 KB