Insecure digital certificates In stdlib
Description
Mishandled trust preferences for root certificates on Darwin in crypto/x509 On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3.