mirror of
https://github.com/SSLMate/certspotter.git
synced 2026-02-02 02:34:20 +01:00
Disable check of pre-cert poision value
Too many pre-certs in the logs with the wrong value :-(
This commit is contained in:
@@ -77,9 +77,12 @@ func ValidatePrecert (precertBytes []byte, tbsBytes []byte) error {
|
||||
if !precertExt.Critical {
|
||||
return errors.New("pre-cert poison extension is not critical")
|
||||
}
|
||||
/* CAs can't even get this right, and Google's logs don't check. Fortunately,
|
||||
it's not that important.
|
||||
if !bytes.Equal(precertExt.Value, []byte{0x05, 0x00}) {
|
||||
return errors.New("pre-cert poison extension contains incorrect value")
|
||||
}
|
||||
*/
|
||||
precertHasPoison = true
|
||||
continue
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user