Skip to content

Commit 00843b5

Browse files
committed
crypto/x509: document that Verify does not restrict key sizes
Change-Id: I13326acdd7bbc563cefda3d518baa64465a231b0
1 parent 90796f4 commit 00843b5

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

src/crypto/x509/verify.go

+4
Original file line numberDiff line numberDiff line change
@@ -744,6 +744,10 @@ func (c *Certificate) isValid(certType int, currentChain []*Certificate, opts *V
744744
//
745745
// Certificates other than c in the returned chains should not be modified.
746746
//
747+
// This function does not enforce any limitations on the size of the public key within
748+
// any certificate. It is the caller's responsibility to ensure that the provided
749+
// public keys do not cause excessive CPU usage
750+
//
747751
// WARNING: this function doesn't do any revocation checking.
748752
func (c *Certificate) Verify(opts VerifyOptions) (chains [][]*Certificate, err error) {
749753
// Platform-specific verification needs the ASN.1 contents so

0 commit comments

Comments
 (0)