Bush-league PKI: both OSX & #golang X509 engines only grok DNS name constraints, fail on email constraint
#Macintrash #doyouevenRFC
-
-
@BRIAN_____ It may be failing at that too Go handled DNS constraint, but explodes when given RFC822 email constraint marked critical -
@randomoracle Even when there are no rfc822names to check against the constraint? -
@BRIAN_____ Yes. Leaf subject only uses DNS names, but issuing CA has critical constraint on RFC822 names Go-based utilities fail
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.