Go crypto/x509 Verify rejects chains containing any of eight distrusted SPKIs

The change modifies the Verify path in crypto/x509 to drop any chain containing the listed intermediates before returning results to the caller. The update was filed under issue 82345 and tracked internally as b/575512169 on an urgent track. No public list of the eight SPKIs appears in the issue; the commit will embed the blocklist directly.

Prior Go releases accepted these intermediates when presented by a root that remained trusted. The new filter operates regardless of root status, creating a hard stop at the intermediate layer. This mirrors earlier distrust events in other TLS stacks but implements the block inside the language runtime rather than at the CA or browser level.

Applications built on Go and deployed in embedded or infrastructure roles will see handshake failures if any path traverses the blocked intermediates. Supermarket refrigeration controllers, point-of-sale systems, and IoT gateways that embed Go TLS stacks become immediate test cases because certificate chains in those environments often rely on long-lived intermediates that receive less scrutiny than leaf or root certificates.

Operators must upgrade before the blocked intermediates appear in live chains. No workaround exists short of replacing the Go binary or maintaining a private fork of the verifier.