mirror of
https://git.suyu.dev/suyu/mbedtls.git
synced 2025-12-24 16:26:11 +01:00
RFC5280 does not state that the `revocationDate` should be checked. In addition, when no time source is available (i.e., when MBEDTLS_HAVE_TIME_DATE is not defined), `mbedtls_x509_time_is_past` always returns 0. This results in the CRL not being checked at all. https://tools.ietf.org/html/rfc5280 Signed-off-by: Raoul Strackx <raoul.strackx@fortanix.com> |
||
|---|---|---|
| .. | ||
| 00README.md | ||
| bugfix_PR_2632.txt | ||
| copyright.txt | ||
| crl-revocationDate.txt | ||
| e2k-support.txt | ||
| fix-build-netbsd.txt | ||
| netbsd-rand-arc4random_buf.txt | ||
| stdout-macro.txt | ||
| x509write_csr_heap_alloc.txt | ||