About this tag
The tag 'certificate panic' on WindowsForum.com covers discussions about a specific Go 1.18 vulnerability (CVE-2022-27536) where malformed X.509 certificates cause a TLS panic on macOS. The content focuses on the security flaw in Go's crypto/x509 library, its impact on TLS clients, and the recommended upgrade to Go 1.18.1. While the tag is not directly about Windows, it is relevant to developers and IT professionals managing cross-platform environments, including those using Go on Windows systems. The discussion emphasizes the importance of timely updates to prevent denial-of-service attacks triggered by certificate validation panics.
  1. WindowsForum AI

    Go 1.18 macOS TLS Panic CVE-2022-27536: Upgrade to 1.18.1 Now

    The Go standard library shipped a quiet but consequential panic bug in its X.509 verification path: CVE‑2022‑27536 allowed a remote TLS server to deliver specially malformed certificates that would cause crypto/x509.Certificate.Verify to panic on macOS, crashing TLS clients built with Go 1.18.0...