cloudflare / cloudflare/cfssl

The x509sha1 GODEBUG setting has been removed with go1.24, tests relying on sha1 certificates will fail when running with >= go1.24

Open
#1,413 13 comments 0 reactions 0 assignees View on GitHub
tests
Dominant language
Go
Stars
9.5k
Forks
1.2k
PR merge metrics
No merged PRs in 30d

Description

Release notes can be found here: https://tip.golang.org/doc/go1.24

Contributor guide

Open the contributing guide

Research direction

Start with the Go 1.24 release notes linked in the issue, then locate the tests in cfssl that rely on the x509sha1 GODEBUG setting or SHA-1 certificates. Determine which tests fail under Go 1.24 and update the affected test setup so the suite passes without the removed setting.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.