Skip to content

Commit 3a5830c

Browse files
committed
crypto/x509: document that Verify does not restrict key sizes
Change-Id: I13326acdd7bbc563cefda3d518baa64465a231b0
1 parent 48a1f69 commit 3a5830c

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

src/crypto/x509/verify.go

+4
Original file line numberDiff line numberDiff line change
@@ -749,6 +749,10 @@ func (c *Certificate) isValid(certType int, currentChain []*Certificate, opts *V
749749
//
750750
// Certificates other than c in the returned chains should not be modified.
751751
//
752+
// This function does not enforce any limitations on the size of the public key within
753+
// any certificate. It is the caller's responsibility to ensure that the provided
754+
// public keys do not cause excessive CPU usage
755+
//
752756
// WARNING: this function doesn't do any revocation checking.
753757
func (c *Certificate) Verify(opts VerifyOptions) (chains [][]*Certificate, err error) {
754758
// Platform-specific verification needs the ASN.1 contents so

0 commit comments

Comments
 (0)