BSD Commit Log Search

   go119, go121: remove

   go124 is the current version. go123 is still supported.

   To build go124 from source, the chain is
   go14 - go118 - go120 - go122 - go124

   Thus, nothing needs go119 and go121.

   agreed by maya@ on tech-pkg

   Update go119 to 1.19.12 (security).

   crypto/tls: restrict RSA keys in certificates to <= 8192 bits

   Extremely large RSA keys in certificate chains can cause a client/server
   to expend significant CPU time verifying signatures. Limit this by
   restricting the size of RSA keys transmitted during handshakes to <=
   8192 bits.

   Based on a survey of publicly trusted RSA keys, there are currently only
   three certificates in circulation with keys larger than this, and all
   three appear to be test certificates that are not actively deployed. It
   is possible there are larger keys in use in private PKIs, but we target
   the web PKI, so causing breakage here in the interests of increasing the
   default safety of users of crypto/tls seems reasonable.

   Thanks to Mateusz Poliwczak for reporting this issue.

   Revbump all Go packages after go120 update

   go119: update to 1.19.5

   go1.19.5 (released 2023-01-10) includes fixes to the compiler, the linker, and
   the crypto/x509, net/http, sync/atomic, and syscall packages. See the Go 1.19.5
   milestone on our issue tracker for details.

   golang119: apply backported fix.

   go: be more verbose when building

   Requested by nia@ during dev summit @EuroBSDCon

   Add a package for Go 1.19

   Release notes: https://go.dev/doc/go1.19