Medium · published May 22, 2026
SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.
| Product | Versions | Fixed in |
|---|---|---|
| golang/crypto | < 0.52.0 | 0.52.0 |