chore: upgrade to go1.21.9

[bassosimone]

Here's the diff with upstream once this PR has been merged:

Your branch is up to date with 'origin/master'.
Already up to date.
diff -ur ./testdata/upstreamrepo/src/crypto/aes/aes_gcm.go ./aes/aes_gcm.go
--- ./testdata/upstreamrepo/src/crypto/aes/aes_gcm.go	2024-04-12 11:48:08.271076296 +0200
+++ ./aes/aes_gcm.go	2024-04-12 11:10:35.815744737 +0200
@@ -8,9 +8,10 @@
 
 import (
 	"crypto/cipher"
-	"crypto/internal/alias"
-	"crypto/subtle"
 	"errors"
+
+	"github.com/ooni/oocrypto/internal/alias"
+	"github.com/ooni/oocrypto/subtle"
 )
 
 // The following functions are defined in gcm_*.s.
Only in ./testdata/upstreamrepo/src/crypto/aes: asm_ppc64x.s
Only in ./testdata/upstreamrepo/src/crypto/aes: asm_s390x.s
Only in ./testdata/upstreamrepo/src/crypto/aes: cbc_ppc64x.go
Only in ./testdata/upstreamrepo/src/crypto/aes: cbc_s390x.go
diff -ur ./testdata/upstreamrepo/src/crypto/aes/cipher_asm.go ./aes/cipher_asm.go
--- ./testdata/upstreamrepo/src/crypto/aes/cipher_asm.go	2024-04-12 11:48:08.281076291 +0200
+++ ./aes/cipher_asm.go	2024-04-12 11:10:35.815744737 +0200
@@ -2,16 +2,16 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
-//go:build amd64 || arm64 || ppc64 || ppc64le
+//go:build amd64 || arm64
 
 package aes
 
 import (
 	"crypto/cipher"
-	"crypto/internal/alias"
-	"crypto/internal/boring"
-	"internal/cpu"
-	"internal/goarch"
+
+	"github.com/ooni/oocrypto/internal/alias"
+	"github.com/ooni/oocrypto/internal/cpuoverlay"
+	"golang.org/x/sys/cpu"
 )
 
 // defined in asm_*.s
@@ -37,8 +37,8 @@
 	aesCipherAsm
 }
 
-var supportsAES = cpu.X86.HasAES || cpu.ARM64.HasAES || goarch.IsPpc64 == 1 || goarch.IsPpc64le == 1
-var supportsGFMUL = cpu.X86.HasPCLMULQDQ || cpu.ARM64.HasPMULL
+var supportsAES = cpu.X86.HasAES || cpuoverlay.Arm64HasAES()
+var supportsGFMUL = cpu.X86.HasPCLMULQDQ || cpuoverlay.Arm64HasPMULL()
 
 func newCipher(key []byte) (cipher.Block, error) {
 	if !supportsAES {
@@ -68,7 +68,6 @@
 func (c *aesCipherAsm) BlockSize() int { return BlockSize }
 
 func (c *aesCipherAsm) Encrypt(dst, src []byte) {
-	boring.Unreachable()
 	if len(src) < BlockSize {
 		panic("crypto/aes: input not full block")
 	}
@@ -82,7 +81,6 @@
 }
 
 func (c *aesCipherAsm) Decrypt(dst, src []byte) {
-	boring.Unreachable()
 	if len(src) < BlockSize {
 		panic("crypto/aes: input not full block")
 	}
diff -ur ./testdata/upstreamrepo/src/crypto/aes/cipher_generic.go ./aes/cipher_generic.go
--- ./testdata/upstreamrepo/src/crypto/aes/cipher_generic.go	2024-04-12 11:48:08.281076291 +0200
+++ ./aes/cipher_generic.go	2024-04-12 11:10:35.815744737 +0200
@@ -2,7 +2,7 @@
 // Use of this source code is governed by a BSD-style
 // license that can be found in the LICENSE file.
 
-//go:build !amd64 && !s390x && !ppc64 && !ppc64le && !arm64
+//go:build !amd64 && !arm64
 
 package aes
 
diff -ur ./testdata/upstreamrepo/src/crypto/aes/cipher.go ./aes/cipher.go
--- ./testdata/upstreamrepo/src/crypto/aes/cipher.go	2024-04-12 11:48:08.271076296 +0200
+++ ./aes/cipher.go	2024-04-12 11:10:35.815744737 +0200
@@ -6,9 +6,9 @@
 
 import (
 	"crypto/cipher"
-	"crypto/internal/alias"
-	"crypto/internal/boring"
 	"strconv"
+
+	"github.com/ooni/oocrypto/internal/alias"
 )
 
 // The AES block size in bytes.
@@ -38,9 +38,6 @@
 	case 16, 24, 32:
 		break
 	}
-	if boring.Enabled {
-		return boring.NewAESCipher(key)
-	}
 	return newCipher(key)
 }
 
Only in ./testdata/upstreamrepo/src/crypto/aes: cipher_s390x.go
Only in ./testdata/upstreamrepo/src/crypto/aes: ctr_s390x.go
Only in ./testdata/upstreamrepo/src/crypto/aes: gcm_ppc64x.go
Only in ./testdata/upstreamrepo/src/crypto/aes: gcm_ppc64x.s
Only in ./testdata/upstreamrepo/src/crypto/aes: gcm_s390x.go
Only in ./testdata/upstreamrepo/src/crypto: boring
Only in ./testdata/upstreamrepo/src/crypto: cipher
Only in ./testdata/upstreamrepo/src/crypto: crypto.go
Only in ./testdata/upstreamrepo/src/crypto: des
Only in .: DIFF.diff
Only in ./testdata/upstreamrepo/src/crypto: dsa
Only in ./testdata/upstreamrepo/src/crypto: ecdh
Only in ./testdata/upstreamrepo/src/crypto: ecdsa
Only in ./testdata/upstreamrepo/src/crypto: ed25519
Only in ./testdata/upstreamrepo/src/crypto: elliptic
Only in .: .git
Only in .: .github
Only in .: go.mod
Only in .: go.sum
Only in ./testdata/upstreamrepo/src/crypto: hmac
Only in ./testdata/upstreamrepo/src/crypto/internal: bigmod
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: aes.go
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: bbig
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: bcache
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: boring.go
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: boring_test.go
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: build-boring.sh
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: build-goboring.sh
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: build.sh
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: div_test.c
diff -ur ./testdata/upstreamrepo/src/crypto/internal/boring/doc.go ./internal/boring/doc.go
--- ./testdata/upstreamrepo/src/crypto/internal/boring/doc.go	2024-04-12 11:48:08.281076291 +0200
+++ ./internal/boring/doc.go	2024-04-12 11:10:35.815744737 +0200
@@ -12,8 +12,3 @@
 //
 // BoringCrypto is only available on linux/amd64 systems.
 const Enabled = available
-
-// A BigInt is the raw words from a BigInt.
-// This definition allows us to avoid importing math/big.
-// Conversion between BigInt and *big.Int is in crypto/internal/boring/bbig.
-type BigInt []uint
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: Dockerfile
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: ecdh.go
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: ecdsa.go
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: fipstls
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: goboringcrypto.h
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: hmac.go
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: LICENSE
diff -ur ./testdata/upstreamrepo/src/crypto/internal/boring/notboring.go ./internal/boring/notboring.go
--- ./testdata/upstreamrepo/src/crypto/internal/boring/notboring.go	2024-04-12 11:48:08.291076285 +0200
+++ ./internal/boring/notboring.go	2024-04-12 11:10:35.815744737 +0200
@@ -6,117 +6,10 @@
 
 package boring
 
-import (
-	"crypto"
-	"crypto/cipher"
-	"crypto/internal/boring/sig"
-	"hash"
-)
-
 const available = false
 
 // Unreachable marks code that should be unreachable
 // when BoringCrypto is in use. It is a no-op without BoringCrypto.
 func Unreachable() {
-	// Code that's unreachable when using BoringCrypto
-	// is exactly the code we want to detect for reporting
-	// standard Go crypto.
-	sig.StandardCrypto()
-}
-
-// UnreachableExceptTests marks code that should be unreachable
-// when BoringCrypto is in use. It is a no-op without BoringCrypto.
-func UnreachableExceptTests() {}
-
-type randReader int
-
-func (randReader) Read(b []byte) (int, error) { panic("boringcrypto: not available") }
-
-const RandReader = randReader(0)
-
-func NewSHA1() hash.Hash   { panic("boringcrypto: not available") }
-func NewSHA224() hash.Hash { panic("boringcrypto: not available") }
-func NewSHA256() hash.Hash { panic("boringcrypto: not available") }
-func NewSHA384() hash.Hash { panic("boringcrypto: not available") }
-func NewSHA512() hash.Hash { panic("boringcrypto: not available") }
-
-func SHA1([]byte) [20]byte   { panic("boringcrypto: not available") }
-func SHA224([]byte) [28]byte { panic("boringcrypto: not available") }
-func SHA256([]byte) [32]byte { panic("boringcrypto: not available") }
-func SHA384([]byte) [48]byte { panic("boringcrypto: not available") }
-func SHA512([]byte) [64]byte { panic("boringcrypto: not available") }
-
-func NewHMAC(h func() hash.Hash, key []byte) hash.Hash { panic("boringcrypto: not available") }
-
-func NewAESCipher(key []byte) (cipher.Block, error) { panic("boringcrypto: not available") }
-func NewGCMTLS(cipher.Block) (cipher.AEAD, error)   { panic("boringcrypto: not available") }
-
-type PublicKeyECDSA struct{ _ int }
-type PrivateKeyECDSA struct{ _ int }
-
-func GenerateKeyECDSA(curve string) (X, Y, D BigInt, err error) {
-	panic("boringcrypto: not available")
-}
-func NewPrivateKeyECDSA(curve string, X, Y, D BigInt) (*PrivateKeyECDSA, error) {
-	panic("boringcrypto: not available")
-}
-func NewPublicKeyECDSA(curve string, X, Y BigInt) (*PublicKeyECDSA, error) {
-	panic("boringcrypto: not available")
-}
-func SignMarshalECDSA(priv *PrivateKeyECDSA, hash []byte) ([]byte, error) {
-	panic("boringcrypto: not available")
-}
-func VerifyECDSA(pub *PublicKeyECDSA, hash []byte, sig []byte) bool {
-	panic("boringcrypto: not available")
+	// nothing
 }
-
-type PublicKeyRSA struct{ _ int }
-type PrivateKeyRSA struct{ _ int }
-
-func DecryptRSAOAEP(h, mgfHash hash.Hash, priv *PrivateKeyRSA, ciphertext, label []byte) ([]byte, error) {
-	panic("boringcrypto: not available")
-}
-func DecryptRSAPKCS1(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-	panic("boringcrypto: not available")
-}
-func DecryptRSANoPadding(priv *PrivateKeyRSA, ciphertext []byte) ([]byte, error) {
-	panic("boringcrypto: not available")
-}
-func EncryptRSAOAEP(h, mgfHash hash.Hash, pub *PublicKeyRSA, msg, label []byte) ([]byte, error) {
-	panic("boringcrypto: not available")
-}
-func EncryptRSAPKCS1(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-	panic("boringcrypto: not available")
-}
-func EncryptRSANoPadding(pub *PublicKeyRSA, msg []byte) ([]byte, error) {
-	panic("boringcrypto: not available")
-}
-func GenerateKeyRSA(bits int) (N, E, D, P, Q, Dp, Dq, Qinv BigInt, err error) {
-	panic("boringcrypto: not available")
-}
-func NewPrivateKeyRSA(N, E, D, P, Q, Dp, Dq, Qinv BigInt) (*PrivateKeyRSA, error) {
-	panic("boringcrypto: not available")
-}
-func NewPublicKeyRSA(N, E BigInt) (*PublicKeyRSA, error) { panic("boringcrypto: not available") }
-func SignRSAPKCS1v15(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte) ([]byte, error) {
-	panic("boringcrypto: not available")
-}
-func SignRSAPSS(priv *PrivateKeyRSA, h crypto.Hash, hashed []byte, saltLen int) ([]byte, error) {
-	panic("boringcrypto: not available")
-}
-func VerifyRSAPKCS1v15(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte) error {
-	panic("boringcrypto: not available")
-}
-func VerifyRSAPSS(pub *PublicKeyRSA, h crypto.Hash, hashed, sig []byte, saltLen int) error {
-	panic("boringcrypto: not available")
-}
-
-type PublicKeyECDH struct{}
-type PrivateKeyECDH struct{}
-
-func ECDH(*PrivateKeyECDH, *PublicKeyECDH) ([]byte, error)      { panic("boringcrypto: not available") }
-func GenerateKeyECDH(string) (*PrivateKeyECDH, []byte, error)   { panic("boringcrypto: not available") }
-func NewPrivateKeyECDH(string, []byte) (*PrivateKeyECDH, error) { panic("boringcrypto: not available") }
-func NewPublicKeyECDH(string, []byte) (*PublicKeyECDH, error)   { panic("boringcrypto: not available") }
-func (*PublicKeyECDH) Bytes() []byte                            { panic("boringcrypto: not available") }
-func (*PrivateKeyECDH) PublicKey() (*PublicKeyECDH, error)      { panic("boringcrypto: not available") }
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: rand.go
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: README.md
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: rsa.go
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: sha.go
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: sig
Only in ./testdata/upstreamrepo/src/crypto/internal/boring: syso
Only in ./internal: cpuoverlay
Only in ./testdata/upstreamrepo/src/crypto/internal: edwards25519
Only in ./testdata/upstreamrepo/src/crypto/internal: nistec
Only in ./testdata/upstreamrepo/src/crypto/internal: randutil
Only in ./testdata/upstreamrepo/src/crypto: issue21104_test.go
Only in .: LICENSE
Only in ./testdata/upstreamrepo/src/crypto: md5
Only in .: PATENTS
Only in ./testdata/upstreamrepo/src/crypto: rand
Only in ./testdata/upstreamrepo/src/crypto: rc4
Only in .: README.md
Only in ./testdata/upstreamrepo/src/crypto: rsa
Only in ./testdata/upstreamrepo/src/crypto: sha1
Only in ./testdata/upstreamrepo/src/crypto: sha256
Only in ./testdata/upstreamrepo/src/crypto: sha512
Only in ./testdata/upstreamrepo/src/crypto/subtle: xor_ppc64x.go
Only in ./testdata/upstreamrepo/src/crypto/subtle: xor_ppc64x.s
diff -ur ./testdata/upstreamrepo/src/crypto/subtle/xor_test.go ./subtle/xor_test.go
--- ./testdata/upstreamrepo/src/crypto/subtle/xor_test.go	2024-04-12 11:48:08.301076280 +0200
+++ ./subtle/xor_test.go	2024-04-12 11:29:21.221494536 +0200
@@ -7,10 +7,11 @@
 import (
 	"bytes"
 	"crypto/rand"
-	. "crypto/subtle"
 	"fmt"
 	"io"
 	"testing"
+
+	. "github.com/ooni/oocrypto/subtle"
 )
 
 func TestXORBytes(t *testing.T) {
@@ -63,14 +64,6 @@
 	})
 }
 
-func min(a, b []byte) int {
-	n := len(a)
-	if len(b) < n {
-		n = len(b)
-	}
-	return n
-}
-
 func BenchmarkXORBytes(b *testing.B) {
 	dst := make([]byte, 1<<15)
 	data0 := make([]byte, 1<<15)
Only in .: testdata
Only in ./testdata/upstreamrepo/src/crypto/tls: boring.go
Only in ./testdata/upstreamrepo/src/crypto/tls: boring_test.go
diff -ur ./testdata/upstreamrepo/src/crypto/tls/cipher_suites.go ./tls/cipher_suites.go
--- ./testdata/upstreamrepo/src/crypto/tls/cipher_suites.go	2024-04-12 11:48:08.301076280 +0200
+++ ./tls/cipher_suites.go	2024-04-12 11:10:35.875744646 +0200
@@ -6,20 +6,21 @@
 
 import (
 	"crypto"
-	"crypto/aes"
 	"crypto/cipher"
 	"crypto/des"
 	"crypto/hmac"
-	"crypto/internal/boring"
 	"crypto/rc4"
 	"crypto/sha1"
 	"crypto/sha256"
 	"fmt"
 	"hash"
-	"internal/cpu"
 	"runtime"
 
+	"github.com/ooni/oocrypto/aes"
+	"github.com/ooni/oocrypto/internal/boring"
+	"github.com/ooni/oocrypto/internal/cpuoverlay"
 	"golang.org/x/crypto/chacha20poly1305"
+	"golang.org/x/sys/cpu"
 )
 
 // CipherSuite is a TLS cipher suite. Note that most functions in this package
@@ -356,7 +357,7 @@
 
 var (
 	hasGCMAsmAMD64 = cpu.X86.HasAES && cpu.X86.HasPCLMULQDQ
-	hasGCMAsmARM64 = cpu.ARM64.HasAES && cpu.ARM64.HasPMULL
+	hasGCMAsmARM64 = cpuoverlay.Arm64HasAES() && cpuoverlay.Arm64HasPMULL()
 	// Keep in sync with crypto/aes/cipher_s390x.go.
 	hasGCMAsmS390X = cpu.S390X.HasAES && cpu.S390X.HasAESCBC && cpu.S390X.HasAESCTR &&
 		(cpu.S390X.HasGHASH || cpu.S390X.HasAESGCM)
@@ -509,12 +510,7 @@
 		panic(err)
 	}
 	var aead cipher.AEAD
-	if boring.Enabled {
-		aead, err = boring.NewGCMTLS(aes)
-	} else {
-		boring.Unreachable()
-		aead, err = cipher.NewGCM(aes)
-	}
+	aead, err = cipher.NewGCM(aes)
 	if err != nil {
 		panic(err)
 	}
diff -ur ./testdata/upstreamrepo/src/crypto/tls/conn.go ./tls/conn.go
--- ./testdata/upstreamrepo/src/crypto/tls/conn.go	2024-04-12 11:48:08.301076280 +0200
+++ ./tls/conn.go	2024-04-12 11:16:59.391477305 +0200
@@ -10,7 +10,6 @@
 	"bytes"
 	"context"
 	"crypto/cipher"
-	"crypto/subtle"
 	"crypto/x509"
 	"errors"
 	"fmt"
@@ -20,6 +19,8 @@
 	"sync"
 	"sync/atomic"
 	"time"
+
+	"github.com/ooni/oocrypto/subtle"
 )
 
 // A Conn represents a secured connection.
Only in ./testdata/upstreamrepo/src/crypto/tls: example_test.go
Only in ./testdata/upstreamrepo/src/crypto/tls: fipsonly
diff -ur ./testdata/upstreamrepo/src/crypto/tls/handshake_client.go ./tls/handshake_client.go
--- ./testdata/upstreamrepo/src/crypto/tls/handshake_client.go	2024-04-12 11:48:08.301076280 +0200
+++ ./tls/handshake_client.go	2024-04-12 11:31:18.671454729 +0200
@@ -12,17 +12,16 @@
 	"crypto/ecdsa"
 	"crypto/ed25519"
 	"crypto/rsa"
-	"crypto/subtle"
 	"crypto/x509"
 	"errors"
 	"fmt"
 	"hash"
-	"internal/godebug"
 	"io"
 	"net"
-	"strconv"
 	"strings"
 	"time"
+
+	"github.com/ooni/oocrypto/subtle"
 )
 
 type clientHandshakeState struct {
@@ -942,17 +941,7 @@
 // to verify the signatures of during a TLS handshake.
 const defaultMaxRSAKeySize = 8192
 
-var tlsmaxrsasize = godebug.New("tlsmaxrsasize")
-
 func checkKeySize(n int) (max int, ok bool) {
-	if v := tlsmaxrsasize.Value(); v != "" {
-		if max, err := strconv.Atoi(v); err == nil {
-			if (n <= max) != (n <= defaultMaxRSAKeySize) {
-				tlsmaxrsasize.IncNonDefault()
-			}
-			return max, n <= max
-		}
-	}
 	return defaultMaxRSAKeySize, n <= defaultMaxRSAKeySize
 }
 
diff -ur ./testdata/upstreamrepo/src/crypto/tls/handshake_client_test.go ./tls/handshake_client_test.go
--- ./testdata/upstreamrepo/src/crypto/tls/handshake_client_test.go	2024-04-12 11:48:08.301076280 +0200
+++ ./tls/handshake_client_test.go	2024-04-12 11:43:28.771174788 +0200
@@ -2783,6 +2783,7 @@
 -----END CERTIFICATE-----`
 
 func TestHandshakeRSATooBig(t *testing.T) {
+	t.Skip("this test is disabled in the ooni/oocrypto fork")
 	for _, tc := range []struct {
 		name              string
 		godebug           string
diff -ur ./testdata/upstreamrepo/src/crypto/tls/handshake_server.go ./tls/handshake_server.go
--- ./testdata/upstreamrepo/src/crypto/tls/handshake_server.go	2024-04-12 11:48:08.301076280 +0200
+++ ./tls/handshake_server.go	2024-04-12 11:19:14.461416915 +0200
@@ -10,13 +10,14 @@
 	"crypto/ecdsa"
 	"crypto/ed25519"
 	"crypto/rsa"
-	"crypto/subtle"
 	"crypto/x509"
 	"errors"
 	"fmt"
 	"hash"
 	"io"
 	"time"
+
+	"github.com/ooni/oocrypto/subtle"
 )
 
 // serverHandshakeState contains details of a server handshake in progress.
Only in ./testdata/upstreamrepo/src/crypto/tls: link_test.go
Only in ./tls: stdlibwrapper.go
Only in ./tls: stdlibwrapper_test.go
diff -ur ./testdata/upstreamrepo/src/crypto/tls/ticket.go ./tls/ticket.go
--- ./testdata/upstreamrepo/src/crypto/tls/ticket.go	2024-04-12 11:48:08.311076274 +0200
+++ ./tls/ticket.go	2024-04-12 11:19:38.751396097 +0200
@@ -5,15 +5,15 @@
 package tls
 
 import (
-	"crypto/aes"
 	"crypto/cipher"
 	"crypto/hmac"
 	"crypto/sha256"
-	"crypto/subtle"
 	"crypto/x509"
 	"errors"
 	"io"
 
+	"github.com/ooni/oocrypto/aes"
+	"github.com/ooni/oocrypto/subtle"
 	"golang.org/x/crypto/cryptobyte"
 )
 
diff -ur ./testdata/upstreamrepo/src/crypto/tls/tls_test.go ./tls/tls_test.go
--- ./testdata/upstreamrepo/src/crypto/tls/tls_test.go	2024-04-12 11:48:08.311076274 +0200
+++ ./tls/tls_test.go	2024-04-12 11:10:35.885744631 +0200
@@ -12,7 +12,6 @@
 	"encoding/json"
 	"errors"
 	"fmt"
-	"internal/testenv"
 	"io"
 	"math"
 	"net"
@@ -503,8 +502,6 @@
 }
 
 func TestVerifyHostname(t *testing.T) {
-	testenv.MustHaveExternalNetwork(t)
-
 	c, err := Dial("tcp", "www.google.com:https", nil)
 	if err != nil {
 		t.Fatal(err)
Only in .: tools
Only in .: UPSTREAM
Only in ./testdata/upstreamrepo/src/crypto: x509