tree e96802653d577691fe2301c1ce5ed76db35db4fe
parent f9d50953b94c15936a72a39a205b3d72ea6dee41
author Roland Shoemaker <roland@golang.org> 1624983604 -0700
committer Roland Shoemaker <roland@golang.org> 1625016589 +0000

crypto/x509: don't fail on optional auth key id fields

If a certificate contains an AuthorityKeyIdentifier extension that
lacks the keyIdentifier field, but contains the authorityCertIssuer
and/or the authorityCertSerialNumber fields, don't return an error and
continue parsing.

Fixes #46854

Change-Id: I82739b415441f639a722755cc1f449d73078adfc
Reviewed-on: https://go-review.googlesource.com/c/go/+/331689
Trust: Roland Shoemaker <roland@golang.org>
Run-TryBot: Roland Shoemaker <roland@golang.org>
TryBot-Result: Go Bot <gobot@golang.org>
Reviewed-by: Filippo Valsorda <filippo@golang.org>