tree dbd64a521b5f1af23e20a13717853d378625b0f0
parent 4f9ec2c7568fce3db51cee0bf151ccf8534868aa
author Filippo Valsorda <filippo@golang.org> 1531437585 -0400
committer Filippo Valsorda <filippo@golang.org> 1531769455 +0000

crypto/x509: add GODEBUG option x509ignoreCN=1

When x509ignoreCN=1 is present in GODEBUG, ignore the deprecated Common
Name field. This will let people test a behavior we might make the
default in the future, and lets a final class of certificates avoid the
NameConstraintsWithoutSANs error.

Updates #24151

Change-Id: I1c397aa1fa23777b9251c311d02558f9a5bdefc0
Reviewed-on: https://go-review.googlesource.com/123695
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
Reviewed-by: Adam Langley <agl@golang.org>