On Darwin, user's trust preferences for root certificates were not honored. If the user had a root certificate loaded in their Keychain that was explicitly not trusted, a Go program would still verify a connection using that root certificate.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-10-04T01:00:00Z
Updated: 2024-09-16T19:24:53.333Z
Reserved: 2017-10-03T00:00:00Z
Link: CVE-2017-1000097
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-10-05T01:29:03.947
Modified: 2024-11-21T03:04:09.193
Link: CVE-2017-1000097
Redhat