[Bug 1290543] New: Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543

            Bug ID: 1290543
           Summary: Error loading certificate file containing negative
                    serial number
           Product: Fedora
           Version: rawhide
         Component: golang
          Assignee: vbatts(a)redhat.com
          Reporter: jliggitt(a)redhat.com
        QA Contact: extras-qa(a)fedoraproject.org
                CC: admiller(a)redhat.com, golang(a)lists.fedoraproject.org,
                    jcajka(a)redhat.com, lemenkov(a)gmail.com,
                    qe-baseos-tools(a)redhat.com, renich(a)woralelandia.com,
                    s(a)shk.io, vbatts(a)redhat.com
        Depends On: 1290472
            Blocks: 1289473



+++ This bug was initially created as a clone of Bug #1290472 +++

Description of problem:
x509 certificates containing negative serial numbers cannot be loaded.

Version-Release number of selected component (if applicable):
go 1.4.x, 1.5.x

How reproducible:
Always

Steps to Reproduce:
1. Create an x509 certificate with a negative serial number
2. Load it using golang's x509.ParseCertificate function

Actual results:
An error is returned

Expected results:
The certificate can be loaded

Additional info:
See https://github.com/golang/go/issues/8265

See http://play.golang.org/p/zpXKadV5mo for recreation


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1289473
[Bug 1289473] atomic-openshift-master - error loading cert pool from ca
file - x509: negative serial number
https://bugzilla.redhat.com/show_bug.cgi?id=1290472
[Bug 1290472] Error loading certificate file containing negative serial
number
-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543

Jakub Čajka <jcajka(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|vbatts(a)redhat.com           |jcajka(a)redhat.com



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543

Jakub Čajka <jcajka(a)redhat.com&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Blocks|1289473                     |
         Depends On|1290472                     |



--- Comment #1 from Jakub Čajka <jcajka(a)redhat.com&gt; ---
Pruned dependencies on RHEL BZs.


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=1289473
[Bug 1289473] atomic-openshift-master - error loading cert pool from ca
file - x509: negative serial number
https://bugzilla.redhat.com/show_bug.cgi?id=1290472
[Bug 1290472] Error loading certificate file containing negative serial
number
-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543



--- Comment #2 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
golang-1.5.2-2.fc22 has been submitted as an update to Fedora 22.
https://bodhi.fedoraproject.org/updates/FEDORA-2015-911afa53ac

--- Comment #3 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
golang-1.5.2-2.fc23 has been submitted as an update to Fedora 23.
https://bodhi.fedoraproject.org/updates/FEDORA-2015-0cdb6d06b7

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543



--- Comment #2 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
golang-1.5.2-2.fc22 has been submitted as an update to Fedora 22.
https://bodhi.fedoraproject.org/updates/FEDORA-2015-911afa53ac

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |MODIFIED



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|MODIFIED                    |ON_QA



--- Comment #4 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
golang-1.5.2-2.fc23 has been pushed to the Fedora 23 testing repository. If
problems still persist, please make note of it in this bug report.
If you want to test the update, you can install it with
$ su -c 'dnf --enablerepo=updates-testing update golang'
You can provide feedback for this update here:
https://bodhi.fedoraproject.org/updates/FEDORA-2015-0cdb6d06b7

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543



--- Comment #5 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
golang-1.5.2-2.fc22 has been pushed to the Fedora 22 testing repository. If
problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here:
https://bodhi.fedoraproject.org/updates/FEDORA-2015-911afa53ac

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543



--- Comment #6 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
golang-1.5.2-2.fc23 has been pushed to the Fedora 23 stable repository. If
problems still persist, please make note of it in this bug report.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ON_QA                       |CLOSED
   Fixed In Version|                            |golang-1.5.2-2.fc23
         Resolution|---                         |ERRATA
        Last Closed|                            |2015-12-22 17:04:23



-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543



--- Comment #7 from Fedora Update System <updates(a)fedoraproject.org&gt; ---
golang-1.5.2-2.fc22 has been pushed to the Fedora 22 stable repository. If
problems still persist, please make note of it in this bug report.

-- 
You are receiving this mail because:
You are on the CC list for the bug.

[Bug 1290543] Error loading certificate file containing negative serial number

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1290543

Fedora Update System <updates(a)fedoraproject.org&gt; changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Fixed In Version|golang-1.5.2-2.fc23         |golang-1.5.2-2.fc23
                   |                            |golang-1.5.2-2.fc22



-- 
You are receiving this mail because:
You are on the CC list for the bug.