cc @FiloSottile and @bradfitz for CL 230025

I think reflect.DeepEqual is firmly outside the Go 1 Compatibility Promise. The supported way to do this would be to compare the Subjects().

Thanks @FiloSottile . Closing as working as intended. Thanks.

I think reflect.DeepEqual is firmly outside the Go 1 Compatibility Promise.

Where is this documented? I can't seem to find this exception.

In general, types that contains unexported fields are not supposed to be compared by value, because it compares internal fields, which are internal implementation details. DeepEqual is just worse.

What do you think about adding an Equal(other CertPool) bool method to x509.CertPool to support more complete comparison. I believe go-cmp will use that automatically once it is added.

I'm happy to open a separate issue for discussion if that seems like it might be an option.

@FiloSottile I don't think that comparing Subjects() is a sufficient solution to this problem. Multiple certificates can have the same subject, but otherwise different data (key, serial number, expiration date, etc.) but will be seen as identical when comparing just using Subjects(). See example: https://play.golang.com/p/pOvfLP6_O1X. This comparison doesn't allow for comparison of expiration dates or any other values within the certificates in the pool. I agree with @dnephin 's suggestion that an alternative Equals function or some way of doing introspection on the certificates in the pool is a better option.

I have also not found any documentation before now stating that reflect.DeepEquals (or the reflect package as a whole) does not adhere to the Go 1 compatibility promise. If this is true, it should be discussed and documented.

I have also not found any documentation before now stating that reflect.DeepEquals (or the reflect package as a whole) does not adhere to the Go 1 compatibility promise. If this is true, it should be discussed and documented.

reflect.DeepEqual itself does adhere to the Go 1 compatibility promise. (It has not changed.)

The question is whether equality under reflect.DeepEqual is a property preserved by the Go 1 compatibility promise. The answer must be that it is not: if it were, that would preclude changes to unexported struct fields. The Go 1 compatibility document doesn't explicitly say that changes to unexported fields are allowed (perhaps it ought to), but note that it does provide for the addition of new exported fields which can also change DeepEqual equality.

I opened a new issue about adding the Equal method: #46057.