Function SafeDecodePrivateKey

internal/pem/decode.go:186–188

SafeDecodePrivateKey calls [encoding/pem.Decode] on the given input as long as it's within a sensible range for how large we expect a private key to be. The baseline is a 16k-bit RSA private key, which is larger than the maximum supported by cert-manager for key generation.

(b []byte)

// how large we expect a private key to be. The baseline is a 16k-bit RSA private key, which is larger than the maximum
// supported by cert-manager for key generation.
func SafeDecodePrivateKey(b []byte) (*stdpem.Block, []byte, error) {
	return safeDecodeInternal(b, GetGlobalSizeLimits().MaxPrivateKeySize)
}

// SafeDecodeCSR calls [encoding/pem.Decode] on the given input as long as it's within a sensible range for
// how large we expect a single PEM-encoded PKCS#10 CSR to be.