{"action":"created","issue":{"url":"https://api.github.com/repos/golang/go/issues/16660","repository_url":"https://api.github.com/repos/golang/go","labels_url":"https://api.github.com/repos/golang/go/issues/16660/labels{/name}","comments_url":"https://api.github.com/repos/golang/go/issues/16660/comments","events_url":"https://api.github.com/repos/golang/go/issues/16660/events","html_url":"https://github.com/golang/go/issues/16660","id":170475379,"number":16660,"title":"crypto/x509: missing support for EC parameter encoding","user":{"login":"listsssl","id":20954394,"avatar_url":"https://avatars.githubusercontent.com/u/20954394?v=3","gravatar_id":"","url":"https://api.github.com/users/listsssl","html_url":"https://github.com/listsssl","followers_url":"https://api.github.com/users/listsssl/followers","following_url":"https://api.github.com/users/listsssl/following{/other_user}","gists_url":"https://api.github.com/users/listsssl/gists{/gist_id}","starred_url":"https://api.github.com/users/listsssl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/listsssl/subscriptions","organizations_url":"https://api.github.com/users/listsssl/orgs","repos_url":"https://api.github.com/users/listsssl/repos","events_url":"https://api.github.com/users/listsssl/events{/privacy}","received_events_url":"https://api.github.com/users/listsssl/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/golang/go/labels/NeedsDecision","name":"NeedsDecision","color":"ededed"}],"state":"open","locked":false,"assignee":{"login":"agl","id":21203,"avatar_url":"https://avatars.githubusercontent.com/u/21203?v=3","gravatar_id":"","url":"https://api.github.com/users/agl","html_url":"https://github.com/agl","followers_url":"https://api.github.com/users/agl/followers","following_url":"https://api.github.com/users/agl/following{/other_user}","gists_url":"https://api.github.com/users/agl/gists{/gist_id}","starred_url":"https://api.github.com/users/agl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/agl/subscriptions","organizations_url":"https://api.github.com/users/agl/orgs","repos_url":"https://api.github.com/users/agl/repos","events_url":"https://api.github.com/users/agl/events{/privacy}","received_events_url":"https://api.github.com/users/agl/received_events","type":"User","site_admin":false},"assignees":[{"login":"agl","id":21203,"avatar_url":"https://avatars.githubusercontent.com/u/21203?v=3","gravatar_id":"","url":"https://api.github.com/users/agl","html_url":"https://github.com/agl","followers_url":"https://api.github.com/users/agl/followers","following_url":"https://api.github.com/users/agl/following{/other_user}","gists_url":"https://api.github.com/users/agl/gists{/gist_id}","starred_url":"https://api.github.com/users/agl/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/agl/subscriptions","organizations_url":"https://api.github.com/users/agl/orgs","repos_url":"https://api.github.com/users/agl/repos","events_url":"https://api.github.com/users/agl/events{/privacy}","received_events_url":"https://api.github.com/users/agl/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2016-08-10T17:39:29Z","updated_at":"2016-08-10T17:47:56Z","closed_at":null,"body":"LetsEncrypt's \"Boulder\" server, the backend for processing CSRs, apparently uses\r\n\r\n    go1.6.2 linux/amd64\r\n\r\nand specifically\r\n\r\n    the upstream Golang x509 package ... to process CSRs.\r\n\r\nIf an CSR submitted to LetsEncrypt service reference a PrivKey that has ec parameters explicity encoded, e.g.,\r\n\r\n    openssl ecparam \\\r\n     -genkey \\\r\n     -param_enc explicit \\\r\n    ...\r\n\r\n, perfectly valid under Openssl, the Boulder server process fails with a server error\r\n\r\n    Err: asn1: structure error: tags don't match (16 vs {class:0 tag:13 length:45 isCompound:true}) {optional:false explicit:false application:false defaultValue:<nil> tag:<nil> stringType:0 timeType:0 set:false omitEmpty:false} certificateRequest @2\r\n    Req: (*x509.CertificateRequest)(nil)\r\n\r\nThis is claimed as a result of GoLang's X509 pkg lacking support\r\n\r\n    The upstream x509 library does not support explicit parameter encoding \r\n\r\nDespite their befuddling insistence that\r\n\r\n    regardless of whether it is added there we likely won't support it in Boulder.\r\n\r\nit'll be useful for GoLang's X509 pkg to implement feature parity with Openssl in supporting the explicit parameter encoding\r\n\r\nMore detail's provided in the original bug post there\r\n\r\n **_Certbot “Exiting abnormally” if CSR uses PrivKey with ec parameters encoded (=param_enc explicit)_**\r\n    \r\n [https://community.letsencrypt.org/t/certbot-exiting-abnormally-if-csr-uses-privkey-with-ec-parameters-encoded-param-enc-explicit/18814](https://community.letsencrypt.org/t/certbot-exiting-abnormally-if-csr-uses-privkey-with-ec-parameters-encoded-param-enc-explicit/18814)\r\n\r\nI can provide additional info here as requested"},"comment":{"url":"https://api.github.com/repos/golang/go/issues/comments/238946548","html_url":"https://github.com/golang/go/issues/16660#issuecomment-238946548","issue_url":"https://api.github.com/repos/golang/go/issues/16660","id":238946548,"user":{"login":"bradfitz","id":2621,"avatar_url":"https://avatars.githubusercontent.com/u/2621?v=3","gravatar_id":"","url":"https://api.github.com/users/bradfitz","html_url":"https://github.com/bradfitz","followers_url":"https://api.github.com/users/bradfitz/followers","following_url":"https://api.github.com/users/bradfitz/following{/other_user}","gists_url":"https://api.github.com/users/bradfitz/gists{/gist_id}","starred_url":"https://api.github.com/users/bradfitz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bradfitz/subscriptions","organizations_url":"https://api.github.com/users/bradfitz/orgs","repos_url":"https://api.github.com/users/bradfitz/repos","events_url":"https://api.github.com/users/bradfitz/events{/privacy}","received_events_url":"https://api.github.com/users/bradfitz/received_events","type":"User","site_admin":false},"created_at":"2016-08-10T17:47:55Z","updated_at":"2016-08-10T17:47:55Z","body":"To @agl for a decision.\r\n"}}
{"actor":{"display_login":"bradfitz"}}