commit aa1e69f3fc21795b6fab531a07008e0744ffe5bf [browse]
Author: Chris Broadfoot
Date: 2016-12-01 12:43:25 -08:00

[release-branch.go1.6] go1.6.4

Change-Id: I2deb44b5ba64e0838cf15f79aebc911ee38f6954
Reviewed-on: https://go-review.googlesource.com/33797
Run-TryBot: Chris Broadfoot <cbro@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>

commit 7a75a55cc44b92836f342e9eeb0f5b1ce20821eb [browse]
Author: Quentin Smith
Date: 2016-11-30 15:16:37 -05:00

[release-branch.go1.6] crypto/x509: read Darwin trust settings for root CAs

Darwin separately stores bits indicating whether a root certificate
should be trusted; this changes Go to read and use those when
initializing SystemCertPool.

Unfortunately, the trust API is very slow. To avoid a delay of up to
0.5s in initializing the system cert pool, we assume that
the trust settings found in kSecTrustSettingsDomainSystem will always
indicate trust. (That is, all root certs Apple distributes are trusted.)
This is not guaranteed by the API but is true in practice.

In the non-cgo codepath, we do not have that benefit, so we must check
the trust status of every certificate. This causes about 0.5s of delay
in initializing the SystemCertPool.

On OS X 10.11 and older, the "security" command requires a certificate
to be provided in a file and not on stdin, so the non-cgo codepath
creates temporary files for each certificate, further slowing initialization.

Updates #18141.

Change-Id: If681c514047afe5e1a68de6c9d40ceabbce54755
Reviewed-on: https://go-review.googlesource.com/33721
Run-TryBot: Quentin Smith <quentin@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-by: Russ Cox <rsc@golang.org>
Reviewed-on: https://go-review.googlesource.com/33728

commit 7ae77e2c3aca3f2630a7d7449e32de93fb519915 [browse]
Author: Russ Cox
Date: 2016-12-01 15:20:25 -05:00

[release-branch.go1.6] syscall: disable TestGetfsstat failure on builders

The underlying bug is fixed on master.
We don't need to (nor want to) port the fix back,
but we do want to be able to run all.bash for
minor releases.

Change-Id: Ib612fc84fd8cd1f57456dd300855318badf97cf7
Reviewed-on: https://go-review.googlesource.com/33850
Run-TryBot: Russ Cox <rsc@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>

commit f0fa13b346c1be50aae0eb4349a7c09bdc5826fc [browse]
Author: Michael Fraenkel
Date: 2016-10-05 11:27:34 -04:00

[release-branch.go1.6] net/http: multipart ReadForm close file after copy

Always close the file regardless of whether the copy succeeds or fails.
Pass along the close error if the copy succeeds

Updates #16296

Change-Id: Ib394655b91d25750f029f17b3846d985f673fb50
Reviewed-on: https://go-review.googlesource.com/30410
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
Run-TryBot: Brad Fitzpatrick <bradfitz@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
Reviewed-on: https://go-review.googlesource.com/33640
Reviewed-by: Chris Broadfoot <cbro@golang.org>

commit da6b9ec7bf1722fa00196e1eadc10a29156b6b28 [browse]
Author: Chris Broadfoot
Date: 2016-07-18 08:18:11 -07:00

[release-branch.go1.6] go1.6.3

Change-Id: Ib8cc2acc44c94ef0f85be001c5914f29606dd80b
Reviewed-on: https://go-review.googlesource.com/25016
Run-TryBot: Chris Broadfoot <cbro@golang.org>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>