From 1c12358fddb8784fde7e1ea16d97cd2dddc81887 Mon Sep 17 00:00:00 2001 From: brad-defined Date: Thu, 8 Jan 2026 11:28:40 -0500 Subject: [PATCH] review comments --- cert/cert.go | 1 + 1 file changed, 1 insertion(+) diff --git a/cert/cert.go b/cert/cert.go index 855815a7..9d40e625 100644 --- a/cert/cert.go +++ b/cert/cert.go @@ -119,6 +119,7 @@ func (cc *CachedCertificate) String() string { // Recombine will attempt to unmarshal a certificate received in a handshake. // Handshakes save space by placing the peers public key in a different part of the packet, we have to // reassemble the actual certificate structure with that in mind. +// Implementations MUST assert the public key is not in the raw certificate bytes if the passed in public key is not empty. func Recombine(v Version, rawCertBytes, publicKey []byte, curve Curve) (Certificate, error) { if publicKey == nil { return nil, ErrNoPeerStaticKey