We want to be able to omit from only one (not both)main
parent
28c632c97b
commit
d427fc023e
@ -1,21 +0,0 @@ |
||||
// Copyright 2020 The Go Authors. All rights reserved.
|
||||
// Use of this source code is governed by a BSD-style
|
||||
// license that can be found in the LICENSE file.
|
||||
|
||||
// +build darwin,arm64,x509omitbundledroots
|
||||
|
||||
// This file provides the loadSystemRoots func when the
|
||||
// "x509omitbundledroots" build tag has disabled bundling a copy,
|
||||
// which currently on happens on darwin/arm64 (root_darwin_arm64.go).
|
||||
// This then saves 256 KiB of binary size and another 560 KiB of
|
||||
// runtime memory size retaining the parsed roots forever. Constrained
|
||||
// environments can construct minimal x509 root CertPools on the fly
|
||||
// in the crypto/tls.Config.VerifyPeerCertificate hook.
|
||||
|
||||
package x509 |
||||
|
||||
import "errors" |
||||
|
||||
func loadSystemRoots() (*CertPool, error) { |
||||
return nil, errors.New("x509: system root bundling disabled") |
||||
} |
||||
@ -1,22 +0,0 @@ |
||||
// Copyright 2020 The Go Authors. All rights reserved.
|
||||
// Use of this source code is governed by a BSD-style
|
||||
// license that can be found in the LICENSE file.
|
||||
|
||||
// +build darwin,arm64,x509omitbundledroots
|
||||
|
||||
package x509 |
||||
|
||||
import ( |
||||
"strings" |
||||
"testing" |
||||
) |
||||
|
||||
func TestOmitBundledRoots(t *testing.T) { |
||||
cp, err := loadSystemRoots() |
||||
if err == nil { |
||||
t.Fatalf("loadSystemRoots = (pool %p, error %v); want non-nil error", cp, err) |
||||
} |
||||
if !strings.Contains(err.Error(), "root bundling disabled") { |
||||
t.Errorf("unexpected error doesn't mention bundling: %v", err) |
||||
} |
||||
} |
||||
Loading…
Reference in new issue