commit 685a61df7ec3c559b1369576731b66d32a5790b8
author Adam Langley <agl@golang.org> Tue Jul 10 15:57:51 2012 -0400
committer Adam Langley <agl@golang.org> Tue Jul 10 15:57:51 2012 -0400
tree 7b83e6847f34f63f802385897cd0729bc3091bb7
parent d6147d8102b095caac3267f9864a4025650c43f8

crypto/x509: exempt broken Entrust certificate from checks.

Entrust have issued a root certificate that's not marked as valid for
signing certificates.

This results in Go programs failing to validate certificates that
chain up to this root (i.e. gateway.push.apple.com:2195).

Although this is clearly a mistake on Entrust's part, it seems that we
will have to bodge around it.

R=golang-dev, dave, r
CC=golang-dev
https://golang.org/cl/6346064