diff options
Diffstat (limited to 'src/crypto/x509/verify.go')
-rw-r--r-- | src/crypto/x509/verify.go | 7 |
1 files changed, 1 insertions, 6 deletions
diff --git a/src/crypto/x509/verify.go b/src/crypto/x509/verify.go index a44f5d6326..b08655d3da 100644 --- a/src/crypto/x509/verify.go +++ b/src/crypto/x509/verify.go @@ -174,11 +174,6 @@ var errNotParsed = errors.New("x509: missing ASN.1 contents; use ParseCertificat // VerifyOptions contains parameters for Certificate.Verify. type VerifyOptions struct { - // IsBoring is a validity check for BoringCrypto. - // If not nil, it will be called to check whether a given certificate - // can be used for constructing verification chains. - IsBoring func(*Certificate) bool - // DNSName, if set, is checked against the leaf certificate with // Certificate.VerifyHostname or the platform verifier. DNSName string @@ -730,7 +725,7 @@ func (c *Certificate) isValid(certType int, currentChain []*Certificate, opts *V } } - if opts.IsBoring != nil && !opts.IsBoring(c) { + if !boringAllowCert(c) { // IncompatibleUsage is not quite right here, // but it's also the "no chains found" error // and is close enough. |