summaryrefslogtreecommitdiff
path: root/src/crypto/x509/root_unix_test.go
Commit message (Collapse)AuthorAgeFilesLines
* crypto/x509: improve internal commentDmitri Shuralyov2017-06-291-1/+1
| | | | | | | | | | | Apply code review suggestion from CL 46715. The block is doing more than just checking len(r.certs) == len(tc.cns). It also verifies that certificate common names match. Change-Id: I28d6926a5da48bd8f6c80aa5e5a1ed6d4990f845 Reviewed-on: https://go-review.googlesource.com/47132 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
* crypto/x509: fix panic in TestEnvVars, improve styleDmitri Shuralyov2017-06-271-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | This panic happens when the test fails due to the returned number of certificates (r.certs) being less than expected by test case (tc.cns). When i == len(r.certs) in the for loop, r.certs[i] will cause an index out of range panic. Also improve readability, consistency and style of the code. Use the more common "got x, want y" pattern. See https://golang.org/s/style#useful-test-failures for reference (and grep codebase for most common occurrences). Add a comment, and remove blank line separating two blocks that are both related to verifying that len(r.certs) == len(tc.cns). This should help with readability. Remove space after colon in call to t.Fatal, since it adds spaces between its arguments. Fixes #20801. Change-Id: I40476103f1b5a0fa74b05637c250926b571c92fd Reviewed-on: https://go-review.googlesource.com/46715 Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org> Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
* crypto/x509: load certs from env vars + extra locationsSteven Hartland2017-05-031-0/+127
Add the ability to override the default file and directory from which certificates are loaded by setting the OpenSSL compatible environment variables: SSL_CERT_FILE, SSL_CERT_DIR. If the variables are set the default locations are not checked. Added new default file "/usr/local/etc/ssl/cert.pem" for FreeBSD. Certificates in the first valid location found for both file and directory are added, instead of only the first file location if a valid one was found, which is consistent with OpenSSL. Fixes #3905 Fixes #14022 Fixes #14311 Fixes #16920 Fixes #18813 - If user sets SSL_CERT_FILE. Change-Id: Ia24fb7c1c2ffff4338b4cf214bd040326ce27bb0 Reviewed-on: https://go-review.googlesource.com/36093 Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org> Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org> TryBot-Result: Gobot Gobot <gobot@golang.org>