Stowage/go
2
0
Fork 0
mirror of https://github.com/golang/go.git synced 2025-12-08 06:10:04 +00:00
Code Issues Projects Releases Packages Wiki Activity

crypto/tls: fetch root certificates using Mac OS API

Browse source 
Fixes #1009.

R=adg, rsc
CC=golang-dev
https://golang.org/cl/5262041
This commit is contained in:
Mikkel Krautz 2011-10-13 13:59:13 -04:00 • committed by Russ Cox
parent 604bd70085
commit 38fb09b412
9 changed files with 208 additions and 31 deletions
Download patch file Download diff file Expand all files Collapse all files

6
src/pkg/crypto/tls/handshake_client.go
View file

@ -97,11 +97,9 @@ func (c *Conn) clientHandshake() os.Error {
certs[i] = cert
}
// If we don't have a root CA set configured then anything is accepted.
// TODO(rsc): Find certificates for OS X 10.6.
if c.config.RootCAs != nil {
if !c.config.InsecureSkipVerify {
opts := x509.VerifyOptions{
Roots: c.config.RootCAs,
Roots: c.config.rootCAs(),
CurrentTime: c.config.time(),
DNSName: c.config.ServerName,
Intermediates: x509.NewCertPool(),