Skip to content

go1.22: Replace x509.Certificate.PolicyIdentifiers with Policies #7148

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
aarongable opened this issue Nov 8, 2023 · 1 comment
Closed

go1.22: Replace x509.Certificate.PolicyIdentifiers with Policies #7148

aarongable opened this issue Nov 8, 2023 · 1 comment
Assignees
@beautifulentropy
Labels
starter Ideal issues for folks getting familiar with Boulder

Comments

@aarongable
Copy link
Contributor

The next version of go has a change to the crypto/x509 library which introduces a new x509.OID type, and uses this type to power a new Policies field on certificate objects. This field exists along-side the current PolicyIdentifiers field, which is of type asn1.ObjectIdentifier.

When we update to go1.22, we should update the CA and ceremony tool to use the new Policies field instead of PolicyIdentifiers.
@aarongable aarongable added the starter Ideal issues for folks getting familiar with Boulder label Aug 27, 2024
@Juneezee Juneezee mentioned this issue Jan 12, 2025
Merged
aarongable pushed a commit that referenced this issue Mar 10, 2025
@Juneezee
Populate x509.Certificate.Policies field (#7940)
eac26b8 
Populate the new x509.Certificate.Policies field everywhere we currently populate the x509.Certificate.PolicyIdentifiers field. This allows Go to use whichever field it prefers (go1.23 prefers PolicyIdentifiers, go1.24 prefers Policies) as the source of truth when serializing a certificate.

Part of #7148
@aarongable
Copy link
Contributor Author

Fixed by #7969

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@beautifulentropy beautifulentropy

Labels
starter Ideal issues for folks getting familiar with Boulder
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@aarongable @beautifulentropy